Horizon Plus Company Limited

Declaration of protection of personal data of data subjects according to the “Privacy Protection Policy”

 

We, Horizon Plus Co., Ltd. (“Company” or “Personal Data Controller” or “Horizon Plus Company Limited”), are committed to personal data privacy protection laws for individuals and other related persons. when their personal data is processed by Horizon Plus Company Limited. To ensure a high-level of data protection. Therefore, the Company has prepared this “Privacy Protection Policy” to clarify the details of the Company’s practices in relation to your personal information.

 

This Declaration of protection of personal data of data subjects according to the privacy protection policy of the Company applies to the Company’s service receivers, service providers, contact person who are natural persons, representatives, directors, employees, authorized persons, and the guarantor of the service recipient of the company including other people related of the service recipients of the company (“you”) In addition, you will need to read the agreement, terms, and conditions of service. including any other documents and/or contracts between you and the Company, which will be simultaneously applied to this privacy policy to the extent that the terms and conditions stated in such documents shall not conflict with this Policy.

 

In this regard, the Company asks you to read and understand this Privacy Protection Policy before signing the acknowledgment. With the following details.

 

  1. Definition

“Personal Data Protection Laws” means the Personal Data Protection Act B.E. 2562 and as amended include announcements, rules, regulations, orders issued under Personal Data Protection law.

“Personal Data” means information about an individual. that be able to identify as a person either directly or indirectly. This does not include information of a deceased person in particular and/or shall have the meaning specified under the Personal Data Protection Laws.

“Company” or “Personal Data Controller” means Horizon Plus Co., Ltd., which is a personal data controller with authority to make decisions about the collection, inspection, use or disclosure of Personal Data.

“Personal Data Processor” means a person or legal entity who carries out the collection, review, processing, use or disclosure of Personal Data in accordance with the instructions or on behalf of the Company, For the avoidance of doubt. A Personal Data Processor is not considered a Personal Data Controller.

 

  1. Collected personal data

The Company will, to the extent it is necessary, only collect use, process and/or disclose various types of the following Personal Data.

for the purpose of Company’s operation according to the objectives specified in Clause 4

2.1 Personally identifiable information, such as name, surname, address on ID card, convenient address for contact, Phone number, Email address, Date of birth, the geo location which can be specified from the electronic tracking system, etc.

2.2 Personal data information such as occupation, marital status, source of income, financial status, etc.

2.3 Financial and transaction information, such as transaction history between the Company and you and/or between Company and juristic person or natural person to which you represent. Bank account number, payment information, credit, or debit card details, electronic payment (e-payment) details, transaction number information for tax payment, etc.

2.4 Sensitive Personal Data information that is specifically declared by the Personal Data Protection Law as sensitive personal data.

The Company will collect, use, process and/or disclose Personal Data only when you have given your consent to the Company or in the case of necessity by the law. Sensitive personal information includes race, criminal history, and any other information required by the law on Personal Data protection.

2.5 Document of the items 2.1 – 2.4, such as a copy of identification card, copy of driving license, copy of passport, copy of salary certificate, copy of tax invoice, copy of bank account, copy of credit bureau report, etc.

 

       3.Source of Personal Data

The company may collect your Personal Data information from two channels. (whether through any providing information in person at the Company, telephony, e-mail, or other means of communication whether it is an electronic form, written document, or any other form) as follows:

3.1 Company receives directly from you.

The Company will collect your Personal Data. when you provided your personal information to the Company by yourself during the process as follows:

  • Procedure for applying for providing services to the Company’s or during the process of entering into juristic act, contract, or agreement with the Company, including but not limited to entering into a contract for the purchase of goods and services or other contracts with the Company.
  • Procedures during and after the provision of the Company’s services.
  • Communication procedures in submitting a request for various rights or filing complaints against the Company.
  • Completion of questionnaires with your voluntary

3.2 The Company receives from third parties.

Under your acknowledgement and/or given consent to those third parties to disclose, transfer and/or share your Personal Data to the Company These third parties may include, but are not limited to:

  • The company and/or legal entity you represent, director, agent, employee, or guarantor, which you have agreed with or have been assigned to coordinate or perform various actions with the company in by contract, juristic act, transaction, or any other activity that person have or will have with the company in the future.
  • Horizon Plus Company Limited and all of its affiliates in the Kingdom of Thailand and outside the Kingdom of Thailand Including but not limited to Horizon Plus Co., Ltd.
  • Government agencies, financial institutions, banks, insurance companies. services providing credit information company, legal entities and/or individuals providing information in general.
  • Any other person requesting services from the company.

 

 

  1. Purpose

The Company may collect, process and/or disclose Personal Data information obtained directly from you. or from third parties. for any purpose or all of the followings:

4.1 To verify identity, assess, review, process and analyze qualifications for the consideration of the Company entering into any juristic act, contract, agreement with you, juristic person, or persons you represent and/or third parties requesting services from the Company.

4.2 To carry out duty following contract that you have agreed with and/or you are a signatory on behalf of a juristic person or a person that you represent who is a contracting party to the Company or Who is a service recipient of the Company. including but not limited to collection services, expenses, other liabilities under the contract; and any assistances in case of any objection related to the performance of the contract as well as the extension of contract time, amendment, or termination of the contract.

4.3 To enforce the contract that you are a contracting party and/or being a signatory on behalf of a juristic person or a person that you represent who is a contracting party to the Company or a service recipient of the Company. or act according to the rights of the Company including maintaining the rights and/or legitimate interests of the Company, such as taking various legal processes.

4.4 To take necessary actions for the legitimate interests of the Company or any other person as reasonably and legitimately under applicable law, for example, to carry out risk management. crime mitigation and preventing fraud for safety and security purposes, etc.

4.5 To communicate for anything related to the contract, provision of service, notification of information and news related to those matters. Including notifying change to the Company’s personal data protection policy (if any).

4.6 For analysis, development, improvement and/or quality control of the Company’s service. And to prevent or solve problems for the Company’s service recipients. and other customers or service recipients of the Company to be able to proceed with any act appropriately. And obtain the highest satisfaction.

4.7 To disclose to Horizon Plus Co., Ltd. for service development. and the business operations of Horizon Plus Co., Ltd. to be efficient. for the best benefit service recipient of the company and/or juristic person or person that you represent as well as other customer or service recipient of the company.

4.8 To comply with the law and carry out the company’s duty in accordance with all applicable laws related to the Company’s business including but not limited to tax law, anti-money laundering laws, credit bureaus, accounting, computer crime laws and cybercrime laws, etc.

4.9 To declare to government agencies and/or government officials. including to comply with court orders, rules and regulations, requirements by laws that the Company shall follow.

4.10 To prevent from or restrain any vital interests or stop life threatening, body, health of any person.

 

To process all the above purpose, the Company needs to obtain your Personal Data information. If the Company has not received as the aforesaid, it might prevent the Company from providing you and/or the juristic person or person you represent with some services, or it may cause any inconvenience to you. The company reserves the right to consider entering into any juristic act, contract, or agreement with you and/or the juristic person or person you represent. In addition, the Company may collect or use your personal information for purposes other than those specified above. in such case The Company will notify you of the details before or at the time of collecting or using the information.

 

  1. Consent purpose

In addition, to the normal purpose of using Personal Data specified in Clause 4 (Purpose) above, the Company may use, process and/or disclose your Personal Data for other purposes. This process will only be used, processed and/or disclosed after the company has received your consent. If you allow the Company to use, process and/or disclose your Personal Data for any purpose. or all of the following.

 

In order for the Company to offer additional services, marketing, promotion, advertising, and public relations of the Company and/or companies in the Horizon Plus Group Co., Ltd. to you as a recipient of the Company’s services and/or as an employee, director, representative or representative of a juristic person or other person who receives the service. of the Company.

 

Disclosed to Horizon Plus group of companies, person and/or juristic person who is a third party selected by the Company, which may be located in Thailand or abroad. which is a country that has sufficient security standards for Personal Data as required by the law on personal data protection. These individuals may offer services or products, conduct marketing activities. promotion Advertising and public relations that the Company believes it may be of interest to you as a recipient of the Company’s services and/or as an employee, director, representative or representative of a juristic person or other person who receives the Company’s services.

 

Disclosed to Horizon Plus group of companies, person and/or juristic person who is a third party selected by the Company or as a service provider of the company as necessary. Such third parties may reside in countries that do not have adequate personal data security standards. The company has supervised person and/or juristic person to have the necessary processes and procedures. (including, but not limited to, entering into a non-disclosure agreement, or having an internal policy on the protection of Personal Data) to provide adequate safeguards for any transfer of Personal Data. For the Company’s business.

 

In addition, to your consent for the Company to collect sensitive personal information for the purposes described in this Privacy Protection Policy.

You acknowledge and understand that you have the right to withdraw your consent given to the company at any time. These rights can be exercised by contacting the Company in writing at the address, telephone number, and/or e-mail address as specified in clause 12 of this Privacy Protection Policy. You understand and agree that failure to give consent or the revocation of consent in some or all respects may affect your experience of receiving service from the Company. and affect offers and certain benefits from the Company and related persons.

 

  1. Disclosure of Personal Data

Your Personal Data will be retained by the Company’s data controller. The Company may transfer your Personal Data to the following groups for the purposes specified in Clause 4 (Purpose of using personal information) above.

6.1 Companies in the Group of Horizon Plus Co., Ltd., Group of Arun Plus Co., Ltd., Group of Lin Yin International Investments Co., Ltd. and Group of PTT Public Company Limited.

6.2 Data Processors, agents, or external service providers that the Company collaborative to perform duties by the contract that the Company has or will have with the service recipients or to provide the Company’s services to service recipients, such as preparing and sending the Company’s documents Storage to service provider (Cloud Service Provider), etc.

6.3 Government agencies, competent government officials, credit bureaus in accordance with applicable laws to be complied with the Company.

6.4 Natural person and/or juristic person according to applicable laws in relation to the Company business that the company has to comply with corresponding to the Company’s business operations, such as auditors, consultants, lawyers, financial institutions.

The Company may disclose your Personal Data to foreign countries. In such a case, the Company will comply with the relevant laws on Personal Data protection.

 

  1. Retention of Personal Data

The Company keeps your Personal Data as follows:

7.1 Keep personal data in document form. by using materials and equipment specifically for document storage and having an appropriate data access and security management system in accordance with the Personal Data Protection laws.

7.2 Keep Personal Data in electronic format by storing it in a computer system. and have an appropriate data access and security management system in accordance with the Personal Data Protection laws.

 

  1. Period of Personal Data retention

The Company will keep your personal information for as long as necessary for the purposes for which it was collected as specified in This Personal Data Protection Policy. Unless there are other laws specifically enforced for a longer period.

In case of the Company collected Personal Data for the purpose of performing by a contract or enforcing to performance by a contract as specified in clause 4.2 and 4.3 (Purpose of using personal data), the Company will collect and retain your Personal Data.  throughout the contract’s validity period and may continue to retain it in the next 10 years after contact end. Counting from the date of last transaction. This’s meant to meet the objectives specified in clause 4.

 

  1. Personal Data collected before Personal Data Protection Laws enforce

For Personal Data that the Company collected before the effective date of Personal Data Protection Laws.

You acknowledge and agree with that. The Company still remains right to retain process and use your Personal Data. Following to consent from a service recipient of the company and/or juristic persons or persons you represent in accordance with your consent at the time of providing Personal Data. If you desire to revoke the consent, please let the Company know, by referring to the methods Cause 11.1 (Right to Withdraw) below.

 

  1. Amendments, changes, or additions to the Company’s Privacy Protection Policy/ Privacy Notice

The Company reserves the right to amend, change or add content and statements to Privacy Protection Policy/ Privacy Notice. as the Company deems appropriate or in accordance with the Personal Data Protection laws. The company will notify you of changes.

 

  1. Data subject right.

To ensure you are aware of personal Data Subject right. The Company would like to inform you.

That you as the Data Subject have the following rights.

11.1 Right to withdraw.

For Personal Data collected by the company that require consent purposes. You may withdraw your consent to the Company’s by informing the Company in writing. The Company may request to know the reason of such a withdrawal and will process your request under the relevant laws. However, the revocation of consent will not affect the collection, use, processing and/or disclosure of Personal Data for which you have previously given consent.

11.2 Right of access to data

You have the right to request access to and obtain a copy of your Personal Data which is under the Company’s responsibility. or request the Company to disclose the acquisition of such Personal Data information.

11.3 Right to Transfer

You have the right to request the transfer of your Personal Data. That is collected and maintained by the Company to other data controllers unless technical methodology is not possible.

11.4 Right to object

You have the right to object to the collection, processing and/or disclosure of certain categories of your personal data at any time. If the collection, processing and/or disclosure of such Personal Data is for legitimate purposes to carry out missions for the public interest or for direct marketing purposes or for scientific research studies, historical study, or statistics. The Company will continue to collect, process and/or disclose Personal Data only when the Company can prove that the collection, use and/or disclosure of Personal Data is for a more important legitimate reason. or to establish legal claims in compliance with the law or process of legal proceedings.

11.5 Right to delete or destruction.

You have the right to request deletion of your Personal Data in certain circumstances, such as when that personal data is no longer truly necessary or when the Personal Data has been processed unlawfully or no longer complies with the lawful base on which that information was collected.

11.6 Right to restriction

You have the right to request the Company to suspend or restrict the use of your Personal Data as specified in the law on Personal Data protection.

11.7 Right to update.

You have the right to request the Company to fix inaccurate or incomplete Personal Data that was collected and retained by the Company. In order to make it accurate, up to date and not misleading.

11.8 Right to complaint

If you find the Company did not follow Personal Data Protection Laws. You have the right to submit a request or complaint to the Personal Data Protection Committee. Ministry of Digital Economy and Society at Chaeng Wattana Government Complex, Building B, 6th-7th Floor, Chaeng Wattana Road, Lak Si, Bangkok, 10210, Thailand Telephone number +662 142 2233.

 

In addition, for exercise of your rights as Data Subject specified in items 11.1 to 11.8 above, you can submit a request to the Company through the channels specified in item 12 (Contact channels). The Company may charge you necessary expenses in request processing.

 

  1. Contact channels

In case you wish to exercise your rights, which are specified in Clause 11 (as Data Subject) above or have questions.

Regarding the privacy protection policy of the company, please contact the details below.

Name: HORIZON PLUS CO., LTD.

Contact address: 199 S-Oasis Building, 17th Floor, Unit 1709 Vibhavadi-Rangsit Road, ChomPhon, Chatuchak, Bangkok 10900 Contact method: Data Protection Coordinator, Telephone: +662-021-8999

Email; DPO_PDPA@Horizonplus.co.th

__________________________

Appointment of Data Protection Officer (DPO)