Personal Data

“Personal Data” means any information relating to a Person, which enables the identification of such Person, whether directly or indirectly, but not including the information of the deceased Persons in particular

Personal Data Collected by Suzuki Motor (Thailand) Co., Ltd.

These are the personal data that the company collects.

• Personally Identifiable Information e.g., name, address, contact address, telephone number, and email address, etc.
• Applicant : Collect personal data from applicants, whether directly or indirectly, or from outsiders.
• Employee or staff mean a person who engage or perform duties for the Company, but not including a contractor or service provider who is a party to a contract of company.
• Other persons who may related to the Company’s applicants, staff or employee including a person whom its personal data is appeared in data system arising from technical measures or organizational measures. e.g., father, mother, spouse, children, emergency contacts, referred persons, beneficiaries, working sureties, and visitors.
• Customers who purchase the Company’s products or services.
• Vendor who are sellers, contractors, and/or Service Provider both Juristic Person and Natural Person.

The Sources of Personal Data

• Personal data directly collected from the data subject through one of our various services e.g., application process, rights request apply, job registration and application process, sign a contract - document, products - services questionnaire or other service channels controlled by the Company, or upon the data subject communicate with Company at the Company’s workplaces or through other contact channels controlled by Company etc.
• Data collected by Company through automatic technology when the data subject access the products websites or other services according to the commitment or mission e.g., tracking user behavior products or other Company’s service through the use of cookies or software on device of data subject etc.
• Personal data collected by Company from other sources apart from the data subject. The source has the authority, justification or receive the consent from the data subject to disclose of data toward the Company e.g., the data from Suzuki Authorized Dealers.

Provide, however, that in case where the data subject refuse to provide necessary data for the Company’s services, It might render the Company to provide such service the data subject in whole or part.

The Purposes and Lawful basis for Processing Personal data

The Purposes of Processing Personal Data

The Company will collect your personal data for various purposes based on types of your products, or services, or activities you use service and nature of your interaction with the Company, or the considerations of each event shall be important. By the following purpose is just a guideline of the Company in using personal data in generally, but a particular purpose relating to the products or services that you use or relationship only shall effective to your data. In order to communicate with the customer for providing service through telephone, email, short message service (SMS) or social media.

• To process and analyze data, including solving usage of website problems.
• To prepare a sale proposal or provide service subject to the data from usage of website.
• To identity verification, authentication and data-check when the customer subscribes to service of the Company or contact for using a service or exercise its legal rights.
• To improve and develop products quality and services in order to modernize products and meet customers’ demand.
• For the purpose of publishing and awareness of customer involve promotions announcement and after sales service.
• To examine customer satisfaction for after sales and services.
• To classify Suzuki end user/customer into categories.
• To notify, for providing after sales service, the customer to take its car under maintenance service according to a mileage check, maintenance record and customer satisfaction on service quality check.
• To provide roadside assistance service.
• For a text messaging (SMS) to satisfy customers/response satisfaction survey.
• To prepare records of personal data processing activities as required by law
• To abide by the laws, effective announcement and instruction or legal proceedings, data proceeding under subpoenas including the exercise of a data subject’s rights relating to personal data.

Legal basis for data processing

The Company will process your personal data subject to legal basis as below.

• For compliance with a contract where it is necessary for compliance with a contract or law or for the purpose of entering into the contract. The Company could not compliance with the contract if you fail to provide such personal data.
• You may withdraw your consent by either method as to giving consent such as by verbal, in written form, by e-mail. However, the withdrawal of consent shall not affect the collection of personal data that you have already given consent legally. It may, apart from the withdrawal of consent, affected your convenience by poor service etc.
• Vital Interest.
• Legal Obligation.
• Public Task.
• It is necessary for Legitimate interests of the Company and other persons, whereby such interests are overridden by the fundamental rights of the data subject of his/her personal data thus identification of the client, work information of employees, information for service improvement and so on. But it must always be considered that such interests are overridden by the rights and liberties of data subject.

In case where the Company is necessary to collect personal data for the performance of a contract, the performance of the legal duties or the entering into the contract. If you reject to provide personal data or object to the operation of data processing in accordance with the objectives of activities. The Company may be unable to conduct or provide service at your request in whole or in part as a result.

Personal Data Processing

After receiving personal data from various sources, the Company will process the data as below.

Collect

• The Company will, both directly and indirectly, collect personal data from data subject or his/her designated representative(s), or related person(s) who provide the Company or from business alliances, telephone services provide, technology services provided by the Company, including but not limited to access the Company’s websites, downloading any data from the Company’s applications, information from social media or reliable data sources such as state agencies, government agency, or private organizations, together with seminar, training course, trade fair both organized by the Company or public organizations or private organizations.
• The Company may, personal data is collected automatically, collected from various sources such as cookies, or other similar technologies.
• To obtain data subject’s consent, they will be informed ahead of time about data processing contained herein. The data subject will, obtain explicit consent from you, be notified the data processing with the detail as per in the Form hereof. The Company shall, in case where the data has been proceeding prior the law come into force, collect and use such personal data in accordance with the former purposes further. You have the right to withdraw the given consent but the Company reserve its rights to consider and compliance according to the law.
• Personal data and processing would be as follows
  • Data Privacy such as name, surname, date of birth, identification card number, photo, nationality, racial, marital status, military status, family member data, health data, and biometrics (facial recognition technology, fingerprint identification, and biometric retina identification) etc.
  • Contact Information such as. address, a number of telephone, facsimile, email, ID in Line Application, and Facebook page.
  • Technical Information such as network synchronization or login, and browser cookies.
  • Other Information such as conversation recording, image and motion through CCTV recording, and ID card reader.

Use

The Company may use your personal data to communicate, provide services or sell products, present a marketing campaign such as promotions and special offers new products on promotion or activities. It will be used for prevention and detection of fraud or abide by the relevant laws, inspection, diagnosis and preparation of documents as requested by the law enforcement agencies and use for prevention of all hazardous or security.

Disclose

The Company may disclose to the following person or agency your personal data subject to the specific purposes and principle of law.

• Internal division of Company, management, directors, employee or staff to the extent related and necessary to your personal data.
• Business Partners, Service Providers, or Personal Data Processors whom the Company hereby assigns or employs to manage and personal data processing for Company under various service providing e.g., medical examination providers, technical service providers, data keepers, payment service providers, postal and parcel delivery service providers, printing service, life insurance and non-life insurance service, training course service, marketing research service, data analytic service, or any other services that may benefits you or relating to business operation of the Company e.g., financial institutes, hospital, insurance companies, Dealers, organizer, event organizers, etc.
• Consultants: e.g., legal advisors, auditors, or any other specialist both internal and external company.
• Law enforcement agencies: e.g., Department of Labor Protection and Welfare, Department for Empowerment of Persons with Disabilities, The Revenue Department, Social Security Office, Office of the Personal Data Protection Commission, Legal Execution Department, etc.
• Customers, business partners, contracting parties, whom you have contacted, or relating to your duty and position or any other similar types of person.
• Any other individual or agency which you have given consent to disclose your personal data.

The Company shall, such personal data disclosure, conduct subject to the scope of specified purposes or so permit as required by law and require to receive your prior consent. The Company shall provide the appropriate measures in order to protect such personal data has been disclosed. However, the Company may sent or transferred your personal data to a foreign country or international organization. noted that your personal data may be transferred to other countries or international organizations.

The retention and the period for which the Personal Data will be retained

The personal data retention of Company shall be limited to the extent necessary according to the purpose of the data collection only and the detail as specified in policy, announcement or relevant law. However, the Company shall, after the lapse of a period or your personal data is no longer necessary in relation to the such purposes, erase or destroy or anonymize the personal data to become the anonymous data which could not identify the data subject further. It shall also be in accordance with the format and standard for erasure and destruction of personal data as required by the committee or law or according to the international standard. In case of dispute, the exercise of rights or lawsuit relating to your personal data. The Company reserve its right to retain the until such dispute has been settle by final rule or judgment thereon.

Services Provided by Third Parties or Sub-Service Provider

The Company may assign or employ third parties, (Personal Data Processors), to process personal data instead or on behalf of the Company. Such third parties may offer various services e.g., Hosting, Outsourcing, Cloud computing service/provider, or a job in other format of hire of work nature.

The Company shall, if the third party has been assigned to personal data process as personal data processors, provide the agreements stipulate the rights and obligations of the Company as a data controller and assigned person as the personal data processing. Including determine the category of personal data in detail and was assigned by the Company to process. Together with the scope for the purpose of processing prosomal data and other relevant covenant. The data processor is responsible for the processing of personal data according to the scope as stipulated in the agreement and instruction only. The data processor is unable to process for any other purposes. The data processor is, where the data processor fails to comply with the instruction of the Company, legally responsible as the role of the data controller by itself.

In case where the personal data processor has assigned a sub-service provider (sub-processor) to process personal data on behalf of personal data processor. Thus the Company shall supervise the data processor to provide a contract document between personal data document and sub-processor. The format and standard of agreement should not lower than the same between the Company and personal data processor. The processor is required to take responsibility for the action of sub-processor against the Company as if acting on its own accord.

The Rights of Data Subject

The data subject has the right to conduct as follows;

• Right to Withdraw Consent: You have the right to withdraw your consent given to Company for the processing of personal data at any time, as long as your personal data is still retained by the Company.
• Right to Access: You have the right to access your personal data and request the Company to duplicate such personal data including to request the Company disclosure of the personal data obtained without your consent.
• Right to Rectification: You have the right to request the Company to correct inaccurate data or fulfill incomplete data.
• Right to Erasure: You have the right to request the Company to erase your personal data for some reason.
• Right to Restriction of Processing: You have the right to request to restrict the use of your personal data for some reason.
• Right to Data Portability: The data subject shall have the right to directly transfer your personal data to other data controllers or to yourself for some reason.
• Right to Object: You have the right to object your personal data processing for some reason.

You are able to contact the data protection officer of the Company in order to file a complaint for execute its right as mentioned above. The detail of contact shall refer to the topic of “Contact Channel” as set out below.

Disclaimer of Data Controller

The Company notified that it is, if the following case occur, necessary to reject your request in accordance with the relevant law.

• The Company notified that it is, if the following case occur, necessary to reject your request in accordance with the relevant law.
• The Company notified that it is, if the following case occur, necessary to reject your request in accordance with the relevant law.
• The Company notified that it is, if the following case occur, necessary to reject your request in accordance with the relevant law.
• You are unable to access, copy, or disclose an acquisition of personal data since obedience to the law or court ruling. In compliance with your request may affect and cause damage against rights and freedom of other person e.g. such disclosure of data is a kind of disclosure of personal data of third person as well or disclosure of intellectual property or trade secret of such third person.

The operating cost of your request shall not be paid as usual. However, the Company shall, if it appears clearly that your request is a kind of unreasonable request or redundant request, charge you an operating cost as think fit.

The Company shall consider and notify the outcome within 30 days after receiving such request.

Marketing and Sales Promotion Activities

The Company will, during using the services, send you the information of marketing and sales promotion activities of products, services you may be interested in, for the purpose of providing you quality service. You have the right to withdraw your consent any time by the exercise of the data subject’s right if you agreed to receive such information from Company.

Cookies

The Company collect and use cookies including other similar technologies on website under our control such as www.suzuki.co.th or on your devices according to service you applied for. This is for operation on safety of service provide by Company and for your convenience and good experience as a user in using the service of Company. This information shall implement to improve our website to meet your more and more requirement. You could set as default or delete the use of cookies by yourself from set as default your web browser.

Personal Data Protection Policies of Other Websites

This privacy policy shall apply to production offer and service provided by Company and the use of Company’s website only. You are required to study and comply with the privacy policies that shown on the such website apart from website of Company.

Security of Personal Data

The Company provide measures to protect personal data by restrict rights to access personal data. The particular staff or authorized or designated person who necessary to access such data according to the purpose notified to the data subject only shall be allowed. The such person shall maintain and comply with the measurement of Company’s personal data protection by strictly. As well as undertake duty of personal data confidentiality and come to acknowledge as a result of performing its duties. The company has provided data security measures both organizational and technical which meet to the international standard requirement and Personal Data Protection Committee as prescribed by the notification. However, the Company reserves the rights to take responsibilities for such security protection due to no system or any data transmission through any public network could guarantee the security from technology crime by perfectly.

Furthermore, upon the Company transmit or disclose personal data to the third party whether for service provide according to the mission of contract or other form of agreement. The Company shall specify the security measures for personal data and appropriate confidentiality as required by law. In order to ensure that the personal data collected by Company shall always be security.

Complaint to the supervisory authority

You have, in the event that the Company fail to comply with the personal data protection law, the rights to lodge a complaint to the Personal Data Protection Committee or supervisory authority appointed by the Personal Data Protection Committee or by law. Provide, however that the Company would like you to contact us before complaint to give the Company a chance to learn the facts and clarity various points of view including solving your concern at the first opportunity.

The changed of Personal Data Protection policy

The Company shall regularly review the Personal Data Protection policy in order to make it compatible with the practice guidelines and relevant law. However, the Company shall, if there is any changed of Personal Data Protection policy, notify you by update data on Company’s website as soon as possible.

Contact Channel Details

Any query, suggestion or concern relating to collection, use and disclosure of the personal data of the Company or relating to this policy or you will be able to contact Company on working day and business hours, Monday through Friday, from 8.00 a.m. to 17.00 p.m. and closed on Saturday, Sunday and Public Holidays if you desire to exercise its right according to the Personal Data Protection Act as per details below. The Company is pleased to answer any queried, listen to suggestions and comments which will be useful for improvement our service provide on website and other service providing by the Company further.