Privacy Policy
INTRODUCTION
This Privacy Policy is intended to describe the management methods of the www.mbcos.co.th site with reference to the processing of personal data of users / visitors who consult it. The policy is given only for the site mentioned above and not for other websites that may be consulted by the user through specific links. MBCOS Co., Ldt. – 64/106 Unit B-12, Moo 4 Eastern Seaboard Industrial Estate Soi 14 T. Pluakdaeng, A. PLuakdaeng Rayong 21140 Thailand – which can be contacted at the following address: info.brushsupport@mbcos.co.th, is the owner of the processing of personal data. It guarantees compliance with the legislation on the protection of personal data (Personal Data Personal Act B.E. 2562 (2019)). Users / visitors are therefore requested to read this Privacy Policy carefully before submitting any personal information and / or filling in any electronic form on the site.
DATA COLLECTED
MBCOS Co., Ldt. is the Data Controller of personal data. In addition, any partner sites that participate in data processing activities independently can assume the role of autonomous data controllers.
SUBJECT OF THE PROCESSING
1) Navigation data. The computer systems and software procedures used to operate this site acquire, during normal operation, some personal data that are then implicitly transmitted in the use of Internet communication protocols. This is information that by its nature could, through associations and processing with data held by third parties, allow users / visitors to be identified (eg IP address, domain names of computers used by users / visitors connecting to the site, etc.). This data is used only for statistical information and to check the correct functioning of the site. The data on web contacts are not stored, however, for more than seven days, except for any verification of computer crimes against the site. No data deriving from the web service will be communicated or disseminated.
2) Data provided voluntarily by users / visitors. If users / visitors, by connecting to this site, send their personal data to access certain services, or to make requests in electronic mail, they are aware that this involves the acquisition by the Data Controller of the sender’s address and / or any other personal data that will be processed exclusively to respond to the request, or for the provision of the service. Personal data provided by users / visitors will be communicated to third parties only if the communication is necessary to comply with the requests of users / visitors themselves or by law (as in the case of billing).
3) Cookies. In addition to the data expressly conferred to the Data Controller, other data deriving from navigation by the user on the site may be recorded: when the user accesses it, in fact, the site may send the user a “cookie”. A “cookie” is a small text file that the site can automatically send to your computer when you view our pages. The “cookies” are used to make browsing more convenient, as well as to obtain information on the navigation of the individual user within the site and to allow the operation of some services that require identification of the user’s path through different pages of the site. For any access to the site, regardless of the presence of a “cookie”, the Website records the type of browser (eg Internet Explorer, Chrome, Firefox), the operating system (eg Windows, Macintosh) and the host and the URL from the user-browser source, in addition to the data on the requested page. This data can be used in aggregate and anonymous form for statistical analysis on the use of the site. For the complete management of cookies, please refer to the “cookie banner” available on every page of this site or consult the “Cookie Policy” page.
PROCESSING METHODS
The processing is carried out through automated tools (for example using electronic procedures and supports) and / or manually (for example on paper) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the regulations in force on the subject.
PURPOSE OF THE PROCESSING
In addition to those indicated in the individual information preceding the compilation of the forms of the various sections of the site, the purposes of the processing carried out by the Owner must be understood as:
a) Collection and conservation and processing for the purpose of establishing and operating and administrative management of the contractual relationship connected to the provision of the service offered on the site.
b) Use of the user’s personal data (in particular the e-mail address) to make communications relating to the performance of the established contractual relationship.
c) Processing of personal data provided and those derived from browsing on the site to provide a service consistent with the information transmitted during the use of the service.
d) Data collection, storage and processing to perform statistical analysis in anonymous and / or aggregate form.
e) Purposes functional to the performance of our business, such as offering personalized content such as, for example, newsletter services.
f) For the communication of commercial information on future initiatives, announcements of new products or services.
g) For market research, statistical and economic analysis.
h) For the sending of advertising or promotional material, and for the execution of prize games, promotional initiatives in general.
LEGAL BASIS OF THE PROCESSING
The legal basis for the processing of customer data carried out by the Data Controller through the website indicated in the inscription is the contract concluded with the Data Subject. In the absence of such a contract, the legal basis is the legitimate interest of the Data Controller to conduct business activities, in accordance with the Personal Data Protection Act B.E. 2562 (2019). For additional purposes that require consent, it will be obtained through a specific form and will also constitute a valid legal basis.
RECIPIENTS
In addition to the owner, in some cases they may have access to the data categories of Managers and authorized parties involved in the corporate organization of the Site (administrative, commercial, marketing, legal, system administrators). Furthermore, the Data Controller may use external parties (such as third-party technical service providers, transporters, hosting providers, cloud services, IT companies, communication agencies) that may be appointed as external managers. The updated list of data processors may always be requested from the Data Controller, by contacting the address indicated above.
TRANSFER TO A THIRD COUNTRY
The data controller uses servers located in the following countries for the services offered by the site: Europe, North America, Asia, and South America. Any data transfer to third countries will take place in compliance with the Personal Data Protection Act B.E. 2562 (2019), ensuring appropriate safeguards. The data processed by the Data Controller will never be disclosed.
PLACE OF DATA PROCESSING
The processing operations connected to the web services of this site take place at the aforementioned offices of the Data Controller and are only handled by technical personnel of the office in charge of processing. If necessary, data related to the newsletter service may be processed by the staff of the company managing the data center, acting as a data processor in accordance with the Personal Data Protection Act B.E. 2562 (2019), at the company’s headquarters.
TIMES AND PLACE OF DATA STORAGE
The data is processed for the time necessary to perform the service requested by the user and then destroyed with safe means of destruction, such as paper shredders and wiping for data on computer support.
OPTIONAL OR MANDATORY PROVISION OF DATA
Apart from that specified for navigation data that automatically acquire data, users / visitors are free to provide their personal data or not to provide it. Failure to provide such data may only result in the impossibility of obtaining what is requested.
RIGHTS OF INTERESTED PARTIES
The subjects to whom the personal data refer have the right at any time under the terms of the GDPR to obtain confirmation of the existence of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification. In relation to the processing of the aforementioned data, the customer has the right to obtain from the Data Controller:
1. The confirmation of the existence or not of your personal data, their communication in intelligible form and the knowledge of their origin, as well as the logic on which the treatment is based.
2. The cancellation, within a reasonable time, of your data, their transformation into anonymous form or the blocking of those processed in violation of the law.
3. The updating of the data, their rectification or, when interested, their integration;
4. Certification that the operations referred to in points 2) and 3) above have been brought to the attention of those to whom they have been communicated, provided that it is not impossible or involves a disproportionate use of means.
5. The customer also has the right to obtain the rectification or cancellation of data concerning him or the limitation of the processing.
6. The customer has the right to revoke the consent related to optional treatments not connected to the execution of the contract signed with the Owner.
7. The customer also has the right to object for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of collection, to request portability, to exercise the right to be forgotten, and to contact the competent authority for data protection for any violation he believes to have suffered. In Thailand, this authority is the Personal Data Protection Commission (PDPC), which can be contacted by e-mail at saraban@pdpc.or.th, by phone at +66 2 142 1033 or +66 2 141 6993, or by mail at Personal Data Protection Commission (PDPC) – 7th Floor, Ratthaprasasanabhakti Building, Government Complex, Chaengwattana Road, Thung Song Hong, Lak Si District, Bangkok 10210, Thailand.
AUTOMATED DECISION-MAKING PROCESSES
No automated decision-making processes are carried out on the aggregate data collected, unless they are aimed at better management of the site.
FINAL CLAUSES
Given the current state of evolution of the legislation on the protection of personal data, we inform you that this privacy policy may be subject to updates.
