Privacy Policy
This Privacy Policy hereinafter referred to as the "Policy", first enforced on May 22, 2023, with the following details
Clause 1 Definitions
Within this policy
- "website" means the website named cinethailand.com and has a website address at www.cinethailand.com
- "Data controller" means a service provider or website owner. According to this policy, which is Cine Thailand, the office is located at 80/49 Senaniwet 1, Senanikom 1 Road, Chorakhe Bua Sub-district, Lat Phrao District, Bangkok, Thailand, contact 065 535 7744.
- "Data Processor" means a third party who processes data for the benefit of or on behalf of the data controller.
- "Information" means anything that conveys the meaning of knowing stories, facts, information or anything. Regardless of whether such communication can be achieved by its nature or through any means. And whether it is prepared in the form of documents, files, reports, books, plans, maps, drawings, photographs, films, visual or audio recordings. recording by computer by electronic means or any other method to make the recording appear.
- "Personal Data" means information about any natural person. This makes it possible to identify that person either directly or indirectly.
- "Sensitive Personal Data" or "Sensitive Data" means user personal data relating to race, ethnicity, political opinion, religious, religious or philosophical beliefs sexual behavior Criminal records, health information, disability, genetics, biometric information, facial, iris or fingerprint information. union information or any other information which the Personal Data Protection Committee has declared to be sensitive personal data under the Personal Data Protection Act.
- "User" means you, visitor, user, member of the website, who is the subject of personal data in accordance with this Policy.
Clause 2 User Consent
Access to the website, user agrees and consents to the collection and use of personal information as follows:
- Purpose of collection and use of personal data,
The user acknowledges, agrees and consents to the data controller collecting and using personal data. for the purpose collect product only. - Personal information collected
Users acknowledge, agree and consent to the data controller collecting and using personal information, name, surname, address, telephone number, email address only.
- Period of data collection
The user acknowledges, agrees and consents to the data controller collecting and using personal data for a period of 12 (twelve) months from the date of consent to the collection and use of personal data in accordance with this policy.
Clause 3 Withdrawal of User Consent
The user acknowledges that the user has the right to withdraw any consent. which the user has provided to the data controller according to this policy at any time by proceeding as follows: cine.thailand@gmail.com.
Clause 4 User Account
Using the website, The data controller may provide each user's user account for the use of the website, where the data controller has the sole right to approve the opening of a user account. Set the user account type. Determine access rights for each user account type. Website License any cost about user account Duties and responsibilities of the user who owns that user account.
The User agrees to keep his account name, password and any other information strictly confidential. and agreed not to allow and to use our best efforts to prevent anyone else from using your user account.
In the event that the user's account is used by another person The user agrees and warrants that the use by such other person is done on behalf of the user and is binding on the user as if it were the user himself.
Clause 5 User Rights
In accessing the website in accordance with this policy and any consent according to this policy. Users are well aware of their rights as data subjects in accordance with the Personal Data Protection Law. Including but not limited to the rights of the user as follows ;
- The user may at any time withdraw the consent given under this policy. By notifying in writing to the data controller in accordance with the methods and channels specified in this policy.
- Users have the right to access and obtain a copy of their own or related personal data that the data controller has collected in accordance with this policy.
- Users have the right to be disclosed by the data controller regarding the acquisition of their personal data or related to them for which they have not given their consent. If there is such a case ;
- The User may have the Data Controller send or transfer his or her personal data to another data controller. This includes obtaining the data sent or transferred directly from the data controller who sent or transferred that data.
- Users may object to the collection, use or disclosure of their personal data or those related to them in the following cases:
- The data controller collects, uses or discloses the user's personal data for the necessity of the legitimate interests of the data controller or other persons in which the user may prove that he has better rights than the data controller.
- The data controller collects, uses or discloses the user's personal data in order to comply with the data controller's laws where the user may prove that he or she has better rights than the data controller.
- The data controller collects, uses or discloses that personal data for direct marketing purposes.
- The data controller collects, uses or discloses personal data for scientific research purposes. historical or statistical, where the research study is not necessarily conducted in the public interest.
- The user may authorize the data controller to delete, destroy or de-identify the data subject. In the following cases ;
- When the personal data is no longer necessary for retention according to the purpose of collection, use or disclosure of such personal data.
- When a user who is a personal data subject has withdrawn his consent to the collection, use or disclosure of that personal data and the data controller has no other legal authority to collect, use or disclose that personal data anymore.
- When users have lawfully objected to the collection, use or disclosure of that information.
- When personal data has been collected, used or disclosed illegally, rules, regulations, and regulations on personal data protection.
- The user may request the data controller to suspend the use of that personal data while retaining it. In the following cases ;
- The data controller is being investigated by an expert committee in accordance with the Personal Data Protection Act, whose users have complained of such an investigation.
- Personal data has been collected, used, or disclosed unlawfully, rules, regulations, and regulations on personal data protection.
- In the event that the user has a necessity for the data controller to keep their personal data for the benefit of the user's own claims, such as creating legal claims of the user. Compliance with or exercising legal claims or raising up against legal claims The user may have the data controller simply suspend the use of the data instead of deleting, destroying or de-identifying the data's owner.
- The data controller is in the process of verifying or investigating to deny the objection to the collection, use or dissemination of the user's personal data in accordance with the personal data protection law to which the user has lawfully objected.
- When users find that their personal information is inaccurate, outdated, unclear, the user has the right to request the data controller to correct such personal information to be accurate, current, complete and not misleading.
- Users may complain to a panel of experts in relation to personal data protection laws in relation to actions, violations or non-compliance with laws, rules, regulations, and regulations relating to the protection of personal data of the data controller.
Clause 6 Security
To collect and use personal information in accordance with this policy The data controller shall provide appropriate security measures to prevent the loss, access, use, alteration, or disclosure of information that is unlawful with the following measures, standards, technology and/or systems:
Clause 7 Correction of Personal Information
The data controller shall provide the following monitoring systems and measures:
- Improving personal information to be accurate, up-to-date, complete and not misleading.
- Delete, Destroy personal data that exceeds the user's consented collection period; and
- Delete, destroy personal information that is not related to the use of such personal information according to the user's consent.
The user acknowledges and agrees that the data controller may collect, use and/or disclose the user's information without the user's prior consent. However, as necessary and only insofar as it meets the objectives and in the following cases
Clause 8 Collection Use and/or disclose personal information in accordance with personal data protection law
- To achieve the objectives related to the preparation of historical documents or archives for the public benefit. or in relation to studies or statistics which provide appropriate safeguards to protect the rights and freedoms of users' personal data.
- To prevent or suppress a danger to the life, body or health of any person.
- It is necessary for the performance of the contract to which the user of the personal data is a party or for processing the request of the user of the personal data before entering into such contract.
- It is necessary for the performance of duties in the public interest of the data controller or the performance of duties in exercising the state powers entrusted to the data controller.
- It is necessary for the legitimate interests of the data controller or of another person where such interests take precedence over the user's fundamental rights in personal data.
- Compliance with the law of the data controller.
In this regard, the data controller will primarily record the collection, use or disclosure of the user's personal data in accordance with the preceding paragraph.
Clause 9 Collection Use and/or disclose sensitive personal data
The user acknowledges and agrees that in addition to the collection Use and/or disclose personal data that users have given their explicit consent to collect. used and/or disclosed personal information in accordance with this policy The data controller may collect Use and/or disclose sensitive personal data of users without prior consent from users. However, as necessary and only insofar as it meets the objectives and in the following cases:
- To prevent or suppress dangers to life, body or health of users, owners of personal data who are unable to give their consent for any reason.
- It is information that is publicly available with the explicit consent of the user of the personal information.
- It is necessary for the establishment compliance. The use or defense of legal claims.
- It is necessary to comply with the law in order to achieve the objectives related to
- Preventive Medicine or Occupational Medicine Assessment of employees' ability to work medical diagnosis Providing health or social services medical treatment health management or systems and services in social work.
- Public Health benefits, such as health protection from dangerous communicable diseases or epidemics that may be contagious or spread into the Kingdom or controlling the standard or quality of drugs, pharmaceuticals or medical devices which has provided appropriate and specific measures to protect the rights and liberties of users who own personal data, especially the confidentiality of personal data according to their duties or professional ethics.
- Labor Protection Social Security National Health Insurance Welfare relating to medical treatment of persons with legal rights Car accident victim protection or social protection The collection of personal data of users is necessary to fulfill the rights or obligations of the data controller or the data subject user. It has put in place appropriate measures to protect the fundamental rights and interests of users who own personal data.
- Scientific Research Studies History or statistics or other public interests, however, by collecting, using and/or disclosing only as necessary and having provided appropriate measures to protect the fundamental rights and interests of the users who own that personal data as specified by the Protection Committee. Personal information is announced.
- Important Public interest It has put in place appropriate measures to protect the fundamental rights and interests of users who own personal data.
In this regard, the data controller will primarily record the collection, use or disclosure of the user's personal data in accordance with the preceding paragraph.
Cluase 10 The use of the website by a person who is in the custody, guardian or guardian of the user
The user warrants that he is not and will not allow any person of the following to visit, use or become a member of the website.
- Incompetent person who is under the guardianship of the user.
- An incompetent quasi who is in the custody of the user.
In the event that the user consents to the aforementioned person to visit, use or be a member of the website. You agree that you have exercised parental, guardianship or guardianship of such person, as the case may be, in all agreements and consents to this policy for and on behalf of such person.
Clause 11 Sending or Transferring personal data abroad
- The destination country or international organization that receives personal data has adequate personal data protection standards in accordance with laws, rules and regulations on personal data protection.
- Obtaining consent from the subject of personal data where the user, the owner of the personal data, has been informed and acknowledged of the inadequate personal data protection standards of the destination country or international organization receiving the data.
- It's a legal practice.
- It is necessary for the performance of the contract to which the user of the personal data owner is a party or for processing the request of the user of the personal data subject before entering into that contract.
- It is an act of contract between the data controller and another person for the benefit of the user who owns that personal data.
- In order to prevent or suppress any harm to life, body or health of the user, the owner of that personal information or any person When the subject of personal data is unable to give consent at that time.
- It is necessary for the implementation of important public interest missions.
- Incompetent person who is under the guardianship of the user.
- An incompetent quasi who is in the custody of the user.
Clause 12 Notification of personal data breach
In the event that the data controller becomes aware of a personal data breach, irrespective of the breach by any person. The data controller will do the following:
- In case there is a risk of affecting the rights or liberties of any person The data controller will report such personal data breach to the Office of the Personal Data Protection Commission. without delay as much as can be done within 72 (seventy-two) hours from the date of knowledge of the incident.
- In case that risk of having a high impact on the rights or liberties of any person The data controller will notify the incident of such personal data breach and remedies to the Office of the Personal Data Protection Commission and to the users of such personal data. without delay as much as can be done within 72 (seventy-two) hours from the date of knowledge of the incident.
Clause 13 Complaints and Reports of Problems with Personal Data
Users may complain and report issues with their personal information, including but not limited to requesting the data controller to update and/or correct the information; objection to data collection or suspend the use of information at the channel cine.thailand@gmail.com
Clause 14 saving Important Items
Unless the Personal Data Protection Law stipulates the data controller's rights otherwise. The data controller will record important records regarding the storage, use, or disclosure of data in writing or electronically for verification by the user, the data subject, or by the government agency. including but not limited to the following items;
- Personal Data Collected
- The purpose of collecting each type of personal information
- Information about the data controller
- Period of retention of personal data
- Rights and methods of access to personal data including conditions relating to persons who have access to personal data and conditions for accessing such personal data.
- The collection, use or disclosure of personal data is exempt from the consent of the data subject user.
- Refusal of Requests and Objections
- Details about security measures in personal data.
Clause 15 Policy Amendment
The data controller may amend and change the text of this policy. at any time and whether in whole or in part The data controller will notify the user of changes from time to time so that the user can consider and take action to accept them by electronic means or by any other means. And if the user has already taken steps to accept it, such amended policy shall be deemed to be part of this policy.
Clause 16 Relationship of the Parties
Clause 18 Dispute Resolution
Whereas both parties understand and know that Entering into this policy does not make the parties and their employees have any relationship as employees under the labor law or partners under the partnership and company law in any way.
Unless expressly stated otherwise in this policy. The parties agree not to transfer their rights, duties and/or liabilities under this Policy to any person without the prior written consent of the other party.
Clause 17 Assignment of Rights
Users may also access the latest revised and amended Privacy Policy from the sources provided by the data controller from the Channels. https://cinethailand/privacy-policy/
If there is a dispute any conflict Occurs as a result of this policy. If the parties are unable to agree The parties agree to bring such dispute to court in Thailand.