T hai Airways International Public Company Limited (THAI) understands any information that identifies the customer to whom such information pertains is important. THAI, therefore, has established the following privacy policy for its handling and protection of personal information.
1. Introduction THAI takes our responsibility regarding the protection of personal information very seriously and we will keep information that the customers inform us securely and confidentially with respect to our standard privacy of information protection to prevent damage or unauthorized access to the customers. This privacy notice applies to the collection and processing of your personal information in relation to your use of services provided by of TG Academy website both desktop web browser and mobile browser.
2. What information do we collect? We generally collect your personal data from you through TG Academy website when you interact with us when you purchase training or examination services from us. This includes: ◦ Basic Personal information e.g., name, gender, date of birth, passport or other personal identification numbers ◦ Contact information e.g., address, phone number, email address ◦ Payment information e.g., credit or debit card information, including the name of cardholder, card number, billing address and expiry date ◦ Feedback information e.g., feedback, complaint, survey ◦ Log data and device information e.g., IP address, cookies ◦ Tracking information e.g., cookies and similar technologies
3. How do we use this information, and what is the legal basis for this use? We process your personal data according to the purposes and limited to what is necessary for the following purposes: To fulfil a contract, or take steps linked to a contract: this is relevant where you make a booking or reservation or purchase any other products or services from us. This includes: ◦ Verifying your identity; ◦ Taking payments; ◦ Communicating with you; As required to conduct our business and pursue our legitimate interests, in particular: ◦ We will use your information to provide products and services you have requested, and respond to any comments, queries or complaints you may send us; ◦ We will monitor use of our websites and online services, and use your information to help us monitor, improve and protect our products, content, services and websites, both online and offline; ◦ We will use information you provide to personalise our websites, products or services for you; ◦ If you provide a credit or debit card as payment, we will also use third parties to check the validity of the sort code, account number and card number you submit in order to prevent fraud; ◦ We will trace back customer activities to prevent, investigate and/or report fraud, misrepresentation, security incidents or crime, in accordance with applicable law; ◦ We will use information you provide to investigate any complaints received from you or from others, about our website or our products or services; ◦ We will use data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation); ◦ We will use data of some individuals to invite them to take part in market research; ◦ We will process your data for purposes such as accounting, billing and auditing; ◦ In some cases, we will also use your data for statistical research and analytic purposes; ◦ In some cases, we will contact you for product or customer satisfaction surveys. Where you give us consent: ◦ We will send you newsletters containing news concerning our products, services and special offers. ◦ We will send you direct marketing in relation to our relevant products and services by us or our affiliates and carefully selected partners. ◦ We will place cookies and use similar technologies in accordance with our Cookies Policy and the information provided to you when those technologies are used. ◦ We create your profile for marketing purposes in order to deliver advertisements that match your interests. ◦ On other occasions we ask you for consent, we use the data for the purpose which we explain at that time. For purposes which are required by law: ◦ In response to requests by government or law enforcement authorities conducting an investigation.
4. Withdrawing consent or otherwise objecting to direct marketing Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your personal data for other purposes. You have an unconditional right to opt-out of direct marketing at any time. You can do this by following the instructions in the communications we send you, or by contacting us using the details set out in section 8.
5. Cookies When you visit our websites, we may place cookies on your devices and use those cookies to collect personal data.
6. Who will we share your personal data with, where and when? We process your data mainly within the Kingdom of Thailand. Personal data will be shared with third party service providers providers of website hosting, maintenance, call centre operation and identity checking. In this case, we use additional safeguards to protect your personal data such as “Data Processing and Transfer Agreement” and “Standard Contractual Clauses” for sharing to the processor outside EU/EEA.
7. What rights do you have? You have the right to ask us for information about our data processing or for a copy of your personal data; to correct, delete or restrict processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing). These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required to keep by law or when we have compelling legitimate interests in retaining the data. We shall inform you without delay within 30 days after receiving of the request. This period may be prolonged for a further month, if several data subjects exercise their rights and their cooperation is necessary to a reasonable extent. If we refuse to take action on the request of the data subject, we shall inform you of the reasons for the refusal. When you are under GDPR regulation, to exercise any of these rights you can get in touch with us using the details set out below. If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred.
8. When is it mandatory to provide data to us? In some cases it may be necessary that you provide us with data, in order for us to enter into a contract with you and to provide you with the services that you request. In such cases we will not be able to submit these services to you without the data.
9. How can you contact us if you have any questions? We hope that we can satisfy queries you may have about the way we process your personal data. If you have any concerns about how we process your personal data, or would like to opt out of direct marketing, you can also send your request to; Privacy Office 89 Vibhavadi Rangsit Road, Bangkok 10900, Thailand Or email to privacy@thaiairways.com Or telephone to +662-545-1444
10. How long will THAI retain your data? In general, THAI will retain your personal data as long as it is needed for the respective purpose of data processing and applicable law then, thereafter, to comply with any applicable recordkeeping provisions. Personal data may also be contained in backup files which we keep for information security purposes and regularly delete when the backup period is over. Where we process registration data, we do this for as long as you are an active user of our services. Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future. 24-May-2018