Orbix Trade Company Limited (the “Company”) has adhered to operating its business with morality and respect for your personal rights. Therefore, the Company emphasizes the significance of personal data protection and personal data security to ensure that your personal data received by the Company will be used according to the given objectives and in accordance with the laws. The Company has arranged this Privacy Notice for Participants of Marketing Promotional and CSR Activities (“Privacy Notice”) to notify you, as a data subject, to acknowledge the objectives and details for collecting, gathering, using, and/or disclosing personal data for marketing promotional activities and corporate social responsibility (CSR) activities (collectively called “Marketing Promotional Activities”)
1. A person who would be applied by this Privacy Notice
2. Channels for collecting personal data
Typically, the Company will collect personal data from you directly through the following channels:
1.Registration form for activities participation
2. Telephone contact or the Company’s Call Center
3. Visual and voice recording in an event of Marketing Promotional Activities
4. Online channels, such as the Company’s social media
In some cases, the Company may collect personal data from other sources to arrange marketing activities. The Company will collect personal data through its business partners or a company in a business group if the Company mutually arranges the Activities with the business partners or a company in such a business group.
3. Personal data that the Company collects, uses, and/or discloses and the objectives of use
The Company will collect, use, and/or disclose personal data only when there is a lawful basis that allows the Company to act as such under the Personal Data Protection Act B.E.2562, whereby the details of the objectives, details of data to be collected, used, and/or disclosed, lawful basis, and details to disclose/transfer personal data to a person or outside organization, will be as follows:
In this regard, the following objectives may apply to the Activities participants in some groups or people only. Please consider the characteristics of objectives according to the relationship between you and the Company on a case-by-case basis.
| Data Processing Objectives | Personal Data to be Collected, Used, and/or Disclosed | Lawful Basis | Disclosure/Transfer |
|---|---|---|---|
| Registration to attend the Activities | The Company will collect and use the data used for person identification, such as name-surname, and contact data, i.e., email and phone number, for registration and contact. | For performing a contractual obligation and/or for the Company's legitimate interest. | Transfer or disclose to business partners and a company in the business group only where there is an event mutually arranged with, or arranged by, business partners or a company in such business group. |
| Receipt of marketing information regarding the Company’s products and services | In some cases, the Company may use the email and phone number you provide to send you marketing information and/or investment analysis. | For a legitimate interest or receipt of your consent. | In the case of an event mutually arranged with or arranged by business partners, the data may be transferred to such business partners by the scope as allowed by you and/or the details notified to you. |
| Taking photos and recording videos of the event atmosphere of Activities to promote via online platforms | When attending the Activities, the Company may take photos and record videos, which your photo may, in some cases, be included in the photo or video record. | For a legitimate interest | Online social media |
| Taking photos and recording videos individually | In attending the Activities, you may be asked by the Company about its request to take photos and record videos individually. | For a legitimate interest | Online social media |
| Answering a questionnaire | The Company may collect data on opinions about the Marketing Promotional Activities, satisfaction, or marketing communication to use in developing and enhancing future Activities. | For a legitimate interest | Nondisclosed |
| For awarding prizes from the Activities | If a prize is awarded or any special rights are granted to a participant of the Activities, the Company will collect and use data, namely your name, surname, and contact information, to hand over a prize or to contact you regarding the details of receiving the prize. If the prize value exceeds THB 1,000, the Company will collect a copy of your identification card for withholding tax and submit the same to the Revenue Department. | For performing contractual obligations, for legitimate interest, and/or for legal obligations | If the prize value exceeds THB 1,000, the Company will submit your identification card number to the Revenue Department. |
| Hiring a master of ceremony, moderator, or photographer | If the Company hires you to act as a master of ceremony, moderator, or photographer, it will collect and use your identification data, contact information, and bank account number to contact you, contract with you, and pay service fees according to the contract with you. | For performing a contractual obligation | Nondisclosed |
4. Will the Company send your data to foreign countries?
The Company may be required to send or transfer your personal data to other data receivers, which would be considered as a part of the regular business operation of the Company.
In this connection, the Company will monitor to ensure that such delivery or transfer of personal data is in accordance with the laws and will procure a protective measure for personal data, as deemed required and appropriate, in line with a confidentiality standard, such as to arrange an agreement with a foreign data receiver to confirm that your personal data will be protected under a personal data protective standard equivalent to those provided in Thailand.
5. How long does the Company keep your data?
The Company will keep your personal data throughout a period in which you are a customer or have a relationship with the Company or a period as required for achieving related objectives as provided in this Privacy Notice. And, when you end a relationship with the Company, the Company will continually keep your personal data after that for a period of prescription or a period specified or allowed by laws as follows:
5.1 Should you are not a customer who has subscribed to an account with the Company, the Company will keep your personal data according to the following period:
| Data Processing Objectives | Personal Data to be Collected, Used, and/or Disclosed | Data Keeping Period |
|---|---|---|
| Registration to attend the Activities | The Company keeps and uses personal data, such as name and surname, for person identification and contact, and contact data, such as email and phone number, for registration and contact. | 2 years |
| Taking photos and recording videos of the event atmosphere of Activities to promote via online platforms | Data on photo and video records | Personal data will be disclosed through social media platforms and will not be deleted/destroyed until there is any objection to such personal data processing. |
| Collecting answers to a questionnaire | Data on opinions about the Marketing Promotional Activities, satisfaction, or views about marketing communication. | 2 years |
| For awarding prizes from the Activities | Data on name-surname and contact information | 5 years |
5.2 Should you have an account with the Company, the Company will keep your personal data according to a data keeping period specified in the Privacy Notice for Customers of the Company, at < > In this regard, the Company will proceed with a suitable procedure to delete or destroy personal data, or to anonymize of the data when it is no longer required or at the end of a specified period.
6. How does the Company protect your personal data?
The Company will well keep your personal data in accordance with the Technical Safeguard, Administrative Safeguards, and Physical Safeguards, to maintain its confidentiality, accuracy, and readiness of use to prevent unauthorized or illegal access, collection, adjustment, amendment, use, and/or disclosure of personal data, by the applicable laws.
The Company has arranged an appropriate measure to prevent a personal data breach, whereby the Company has determined policies, rules, and criteria for protecting personal data, such as a measure for personal data accessing control and use of secure and proper equipment to keep and process personal data, personal data accessing restriction, determination on personal data accessing rights of users, rights to grant the assigned staffs to access the data, and duties and responsibilities of users, for preventing access to personal data, disclosure, cognition, or unauthorized copying personal data, or stealing equipment to keep and process personal data. The Company procures a measure for tracking the history of access, adjustment, deletion, or transfer of personal data that is in line with and suitable for the method and equipment for keeping, using, or disclosing personal data, including an inspection for evaluating the effectiveness of implementing such policies, rules, and criteria for protecting personal data.
7. Your rights regarding personal data
The Company acknowledges and respects your legal rights, whereby you can exercise the rights according to the conditions provided by laws as follows:
You can contact the Company to exercise any rights mentioned according to the Company’s contact details, which are given through an application, website, social media, or marketing media of the Company.
Contact Channel: Customer Support
Orbix Contact Center Tel: 02-026-6107 (Every day from 08.00 to 19.00 hr.)
Orbix Live Chat: orbixtrade.com/th/live-chat (Every day 24 hours)
E-mail: [email protected]
8. Will the Company amend or adjust this Privacy Notice?
The Company may review the content to amend, adjust, or change this Privacy Notice from time to time so that you can acknowledge an updated collection, use, and disclosure of personal data. If there is any amendment, adjustment, or change of this Privacy Notice, the Company will inform you via the Orbix Trade application and/or the Company’s website: <www.orbixtrade.com>
9. Notification of Objectives and Details for Personal Data Processing
In the case where notification of new objectives or details as provided in this Privacy Notice is unable to do or would be an obstacle to a use or disclosure of your personal data which the Company has received indirectly from other sources, particularly for achieving a purpose of scientific, historical, statistic research, the Company shall procure an appropriate and standardized measure to protect rights, freedom, and benefits of the data subject as provided in this Privacy Notice.
If you give personal data of other persons (i.e., family members or other contact persons) to the Company (i.e., name, surname, date of birth, age, address, relationship, signature, and contact detail) for an objective specified in this Privacy Notice. In that case, you should proceed with an action to ensure that those people have been informed of personal data disclosure to the Company. You should notify those persons of this Privacy Notice and/or ask for consent from those persons (if required) and/or based on other lawful criteria or basis.
10. Contact Channels of the Company and the Data Protection Officer
Should you have any suggestions or inquiries about the details of the collection, use, and/or disclosure of your personal data, including a request to exercise rights under this Privacy Notice, you can contact the Company and the Data Protection Office at:
Announced as of 17 May 2024