Personal Data Protection Policy Notice of Nana Plaza
Nana Plaza (“Nana Plaza”) is committed to providing quality services to meet your expectations. Nana Plaza attaches great importance to protecting your personal data and compliance with applicable laws and regulations. Therefore Nana Plaza has prepared this statement on how we collect, handle and process data for our customers and visitors and to inform you of the protection of your personal data and your rights as the personal data subject.
Nana Plaza would like to inform you as the Personal Data Subject who is:
(1) A person who has been in contact with Nana Plaza, whether it was a visitor or a customer of the Nana Plaza
(2) An employee, personnel, officer, representative, shareholder, director, personal contact, an agent or a person related to a juristic person, a person under (1) above, a group of assets, or a body of persons who have been in contact with Nana Plaza, whether they were a customer of Nana Plaza or were not.
About protecting your personal information that Nana Plaza receives or will receive from business operations and providing services through venues, websites, telephones, electronic channels, applications, social media or other sources to ensure that Nana Plaza will take care of your personal information. And will collect, use or disclose your personal information only if Nana Plaza deems it necessary, correct and appropriate and notifies you of your rights as the personal data owner.
1.1 information that can identify the owner of the personal data. Whether directly or indirectly.
(2) Personal information such as name – surname, gender, date of birth, age, and information on or in documents such as identification cards, passport, residence certificate, alien identification card, work permit, social security card, driving license, car registration or house registration, signature, taxpayer identification number information about family members educational background, occupation, status, membership, work history and other benefits that are not compensation for work insurance-related information.
(3) Contact information, such as the address according to the house registration. Address for sending documents. Electronic postal address (Email Address). Home phone number, mobile phone number and fax number. Your name or details for use through applications or digital channels such as LINE, Google, Facebook, YouTube or Twitter, WhatsApp or WeChat and contact information provided to Nana Plaza through its services.
(4) Financial information and financial transactions, including payment deposits. Movements of deposits into accounts. Income and Expenditure Information. Information about an act or alleged offence within Nana Plaza Prosecution and the execution of information about insurance or investments. Information relating to shareholders and their assets. Information about paying or receiving payments. Information for compliance with local laws and regulations.
(5) Information relating to Nana Plaza’s dealings, i.e. information Nana Plaza receives via its venues, telephones, and electronic or digital channels. Social media Information from CCTV and off-site services. Such information may be displayed or recorded in written form. Recording tapes or recordings of transactions Photographs or moving pictures.
(6) Technical data These are the IP Address, Media Access Control (MAC), the ID number attached to the device connected to the network and the network (MAC Address), Log, Device ID ( Device ID), application interface information (APIs), cookies (Cookies), plug-in type and version, browser, operating system and platform. Internet system or mobile phone network geolocation information Settings. Information on the device and other technical information from using Nana Plaza applications and operating systems.
(7) Usage Information, Including the name or code for using the service (Username), the password for using the service (Password), and information about searches. Time of use on websites, platforms, applications, timestamp of the last click, favourites, Q&A, log files, and communications.
(8), Behavioral data, such as data about personal interests or preferences, nature of use or use of data.
1.2 Personal data that is sensitive information which Nana Plaza must first obtain your consent before being collected, including biological data (e.g. biometric data, fingerprint and audio identity), criminal history, health information, or any other information as announced by the Personal Data Protection Committee.
Nana Plaza will collect, use and disclose your personal data in accordance with the rules outlined in the law, namely: (1) necessity according to a contract or request or service that you have made to Nana Plaza; to then comply with any contract or request or service you have made with Nana Plaza; (2) legal obligations which Nana Plaza must comply with under the law; (3) Nana Plaza’s legitimate interests or other persons or juristic persons (4) the necessity to prevent harm to the life, body or health of persons; (5) the necessity for the public interest or the exercise of government rights, or (6) your consent if it is not required by the criteria specified in (1) to (5), for one of the following purposes:
2.1 For communication or to provide information related to or related to the products or services or information that you use or will use with Nana Plaza
2.2 For the execution of the agreement specified in your request (e.g. an employment application) or the contract you have entered into with Nana Plaza or related to contracts (e.g. employment contracts) or requests that you make with Nana Plaza, such as the transfer of documents or to comply with agreements entered into between Nana Plaza and other parties that are necessary and relevant to the provision of services to you;
2.3 In order to manage your relationship with Nana Plaza and provide details or history of using a service provided by Nana Plaza or for offering a service to you in the future.
2.4 To verify your identity according to Nana Plaza’s, know your client process, including checking and confirming your information and following up with any guidelines required by law and the Nana Plaza
2.5 For any action as required by the laws of Thailand, be it requested or recommended to comply.
2.6 For management and internal management of Nana Plaza, such as supervision, improvement or the audit of Nana Plaza’s internal operations.
2.7 For the management of various risks, such as
(1) Preventing, dealing with or reducing risks that may arise from illegal actions which may happen to you, a Nana Plaza customer, personnel of Nana Plaza and Nana Plaza by using it in considering the improvement of the security system related to the use of various channels, operations and security systems for the Nana Plaza’s information technology operations.
(2) Security, such as recording images of visitors through CCTV and those entering the building for security purposes.
2.10 To provide and offer you products, services and service options, including offering services or products from Nana Plaza’s business partners.
2.11 For Verification of contractual obligations or to check commitments according to you or your contractual party.
2.12 For the management of services and complaints such as checking transactions from clubs and restaurants, venues and in-house services that deal with financial transactions and checking wrong financial transactions or the transmission of information within Nana Plaza or between Nana Plaza and other people or our business partners to support complaints. Or to be used as supplementary data for adjusting work processes related to such matters.
2.13 For statistical analysis or research related to the Nana Plaza’s business operations or for companies in the Nana Plaza, including affiliates and business partners.
2.14 For strategic adjustments for the benefit of evaluating Nana Plaza’s performance or services.
2.15 For evaluation, development and improvement of products or services or take action to enforce Nana Plaza’s rights, which may provide information derived from such analysis to Nana Plaza for financial forecasting or updating services within the group’s companies and affiliates.
2.16 For organising promotional projects or activities, meetings, seminars, recreation and on-site visits.
2.17 For cloud storage and other systems that Nana Plaza uses to store information.
2.18 For the performance of duties in accordance with the conditions that Nana Plaza and its business partners are a party to or to enforce legal or contractual rights binding Nana Plaza.
2.19 To connect or facilitate your access to the website, employment applications and goods or services offered by Nana Plaza or its business partners.
The collection, use or disclosure of your personal information, such as sending or transferring your personal information to Nana Plaza’s business partners, in accordance with the rules set out in this statement.
Nana Plaza may be required to disclose your personal information to other persons or entities located in Thailand or abroad in order to achieve the objectives stated in this letter, namely.
3.1 Business partners of Nana Plaza, such as business alliances in finance, accounting services, shareholders, marketing, transportation, telecommunication, health centres, insurance or life insurance companies, or any person(s) that are involved in the promotion of the Nana Plaza or their affiliates, data analysis Platform contributors or a person whose name or logo appears in any contracts, websites or other service channels of Nana Plaza
3.2 Persons involved in Nana Plaza’s services, For example, those who act as intermediaries in various Nana Plaza transactions or payment system providers. Nana Plaza’s service partners outsource service providers, operators or sellers of goods or services to Nana Plaza Or Nana Plaza representatives both domestically and internationally to which Nana Plaza is a contractual party, such as an infrastructure development service provider, internet network service provider, telecommunication and Communication Service Providers, technical infrastructure provider, Electronic system development or information technology service provider, Logistics and Warehousing Service Providers, Cloud service provider, for doing research, data analytics provider. Communication service provider, Survey service provider, Organisers of events and activities, Verification and authentication system provider, Service provider for checking and reading data with electronic devices, Verification and verification service providers, credit rating agency, courier service, recording service providers and service providers regarding security or fraud prevention.
3.3 Individuals or agencies as required by law Nana Plaza may be required to disclose your personal information to comply with laws, rules, regulations and regulations or orders of government agencies, government agency regulators or in cases where the Nana Plaza believes that such action is necessary to comply with the law to protect the rights of Nana Plaza or other persons for the safety of others or to prevent, investigate or deal with fraud, security or safety issues in various fields.
3.4 Consultants in various fields of Nana Plaza, such as financial, legal, technical, website and auditor experts, or accepting the transfer of Nana Plaza’s claim. This includes those involved in corporate restructuring, business transfers, investments, mergers and acquisitions, and the purchase or sale of assets or businesses by persons involved in such operations.
3.5 Consultants in various fields of Nana Plaza, such as financial, legal, technical, website and auditor experts.
3.6 Associations, organisations, clubs and agencies Such as employment agencies.
3.7 Various websites and social media Such as Facebook, Google or Instagram.
4.1 Retention of your personal data.
Nana Plaza has established measures for the security of personal information, both in document format and electronic form, to prevent the loss, access, use, change, alteration or disclosure of personal information without right or unlawful.
4.2 Period of retention of your personal data.
Nana Plaza will collect your personal information for the purposes stated by Nana Plaza in this statement. As required by law and up to 10 years from the date you terminate your relationship with Nana Plaza, unless Nana Plaza has other necessities as required by law or such personal data is information that cannot be deleted or destroyed due to technical limitations.
In the event that Nana Plaza has a necessity to send or transfer your personal information to persons residing in foreign countries, such as your counterparty or representative, affiliates or organisation in a foreign country or destination recipient of such information where they may be insufficient standards for personal data protection as required by law, Nana Plaza will provide an appropriate process so you can be sure that your personal information sent to the recipient will be safe
To access Nana Plaza’s website system, Nana Plaza automatically collects certain information from your use for the purposes set out in this statement. For example, Nana Plaza may use the information that cookies and similar technologies have recorded or collected to be used in statistical analysis or in other activities of the website system, or Nana Plaza businesses to help Nana Plaza provide you with a good experience whilst using the website as well as to improve the efficiency and quality of Nana Plaza’s website system services.
You, the owner of the personal data, have the following rights:
7.1 Right to request access and obtain a copy of personal data.
You have the right to request access and obtain a copy of personal information about you, which is under Nana Plaza’s responsibility or request Nana Plaza to disclose the acquisition of such personal data that you did not give consent.
You have the right to obtain personal data about yourself that you have provided to Nana Plaza based on your consent or necessity under this statement or as announced by the Personal Data Protection Committee. In the event that Nana Plaza has made such Personal Data in a form readable or generally usable by means of an automated tool or device and that the Personal Data can be used or disclosed by any means, including having the right to (1) request that Nana Plaza transmits or transfer personal data in such form to other personal data controllers whenever possible by automated means; and (2) request personal data that Nana Plaza sends or transfers in such form to other personal data controllers directly except by technical conditions if it is not possible.
7.2 Right to object.
You have the right to object to the collection, use or disclosure of your personal information by Nana Plaza in the event that: (1) Nana Plaza collects your personal information due to the necessity of performing its business or group businesses for Nana Plaza’s public interest; or the exercise of government rights or for Nana Plaza’s legitimate interests or other person or juristic person; (2) Nana Plaza collects, uses or discloses your personal information for marketing purposes; or (3) Nana Plaza collects, uses or discloses your personal information for the purposes of research studies or statistics.
7.3 Right to request the deletion or destruction of personal data.
You have the right to ask Nana Plaza to delete or destroy or make your personal information non-identifiable in the event that:
(1)Your personal information is no longer necessary for Nana Plaza to keep for the purpose; or (2) You withdraw your consent, and Nana Plaza does not have statutory authority to continue using or disclosing that personal information; or (3) You object to the collection, use or disclosure of your personal information collected by Nana Plaza due to the necessity of carrying out its mission for the interest of Nana Plaza or the exercise of government rights or for the Nana Plaza’s legitimate interests or other person or juristic person and Nana Plaza cannot refuse such objection; or (4) You object to the collection, use or disclosure of personal information for direct marketing purposes; or (5) Your personal information has been collected, used or disclosed without legality unless Nana Plaza is obliged to collect your personal information for legal compliance, Establishment of legal claims or the use or defence of any Nana Plaza’s claim(s).
7.4 Right to request to suspend the use of personal data.
You have the right to suspend the use of your personal information in the event that (1) Nana Plaza is in the process of reviewing the request to exercise the right to correct the personal information to be current; (2) Nana Plaza collects, uses or discloses your personal information unlawfully (3) Nana Plaza is not obliged to collect, use or disclose that information for one purpose but you require Nana Plaza to collect your personal data for your benefit by law; or (4) you wish Nana Plaza to suspend the use of your personal data because it is in the process of proving or verifying objection(s) to your personal data.
7.5 Right to request to correct personal data.
You have the right to ask Nana Plaza to correct your personal data to be accurate, current, complete and not misleading.
7.6 Right to withdraw consent.
You have the right to withdraw your consent to Nana Plaza from which you consent to Nana Plaza collecting, using and disclosing your personal information at any time. You have the right to notify the revocation of consent for personal data Nana Plaza collected before the Personal Data Protection Act B.E. or collected via an employment agency used by Nana Plaza.
7.7 Rights of complaint.
You have the right to complain to an agency or legal authority, in the case of Nana Plaza or personal data processors, including employees or contractors of Nana Plaza who violate or fail to comply with the law on personal data protection.
In the event that you wish to exercise any rights under Clauses 7.1 to 7.7 above, you can make a request to Nana Plaza through Nana Plaza or any other channels as specified by your manager. When Nana Plaza has received your request, Nana Plaza will consider your request in accordance with the rules and conditions prescribed by law and will complete your request and notify you of the result of consideration and action within 30 days from the date Nana Plaza has received the request and complete supporting documents.
In the event that you exercise the rights of the subject of such personal data, this may prevent you from receiving certain services from Nana Plaza whilst Nana Plaza considers or processes your request.
Nana Plaza will not charge a fee from you as a result of any request for the exercise of rights unless Nana Plaza deems that the request for the exercise of your rights is excessive or without any other reasonable cause. In this case, Nana Plaza may charge a fee for processing your request but will inform you of the rates should this become applicable. You can request to exercise the rights of the personal data subject from the date the Personal Data Protection Act B.E. 2562 came into force.
Nana Plaza may change this Personal Data Protection Notice from time to time as it deems appropriate, and Nana Plaza will notify you through its websites and applications. Nana Plaza recommends that you read and review the details in the Personal Data Protection Notice whenever such amendments are made.
If you wish to contact or would like to know more information or explanations about the collection, use and disclosure of your personal information, including the request to exercise the rights of the personal data subject under this statement, you can contact Nana Plaza.
Sukhumvit Road, Khlong Toei Nuea,
Watthana, Bangkok 10110