We apply both the Thai and European protection laws, i.e. Personal Data Protection Act (“PDPA”) and General Data Protection Regulation, (“GDPR”), however, only cite the latter in detail.
We reserve the right to change this policy at any given time, of which you will be promptly updated. If you want to make sure that you are up to date with the latest changes, we advise you to frequently visit this page.
What User Data We Collect
When you visit the website, we may collect the following data:
Your IP address.
Your contact information and email address.
Other information such as interests and preferences.
Data profile regarding your online behaviour on our website.
Protecting your privacy is very important to us. We use information that we receive and store during your visit to our website exclusively for internal purposes and to improve the design of the website, including sub-pages. If necessary for the purpose of defending against attacks that impair the functionality of our website (hacker attacks, malware, denial of service attacks, spam), we may access your computer’s IP address for this purpose alone, which is stored by our telecommunications provider as a security measure for a period of seven days. After this period has elapsed, we will either delete or anonymize the IP address. The legal basis for this processing is Art. 6(1)(f) of the GDPR.
Why We Collect Your Data
We are collecting your data for several reasons:
To better understand your needs.
To improve our services and products.
To send you promotional emails containing the information we think you will find interesting.
To contact you to fill out surveys and participate in other types of market research.
To customize our website according to your online behavior and personal preferences.
Safeguarding and Securing the Data
SL is committed to securing your data and keeping it confidential. SL has done all in its power to prevent data theft, unauthorized access, and disclosure by implementing the latest technologies and software, which help us safeguard all the information we collect online.
Data Transfers to Third Parties
We transfer selected personal information for specific purposes to third parties, as described in detail in the following. We do not transfer any other of your personal data to third parties without your express consent.
Data Transfer to The Rocket Science Group (Mailchimp)
To enable us to send newsletters more efficiently, we make use of Mailchimp, provided by the The Rocket Science Group. In order to do so, we transfer certain personal data to this service provider.
The exact information transmitted can vary on a case-by-case basis, however we transfer at most the following information about you:
Your full name, so that Mailchimp can address you in emails;
Your email address, so that Mailchimp can send you emails;
Your current city
Unless mentioned otherwise, Mailchimp uses this data to send you emails that are relevant to you.
We use both session cookies and permanent cookies on our website. This processing is carried out on the basis of Art. 6(1)(F) of the GDPR and in the interest of optimizing or enabling the use of and adapting the appearance of our website.
Links to Other Websites
Restricting the Collection of your Personal Data
At some point, you might wish to restrict the use and collection of your personal data. You can achieve this by doing the following:
When you are filling the forms on the website, make sure to check if there is a box which you can leave unchecked, if you don't want to disclose your personal information.
If you have already agreed to share your information with us, feel free to contact us via email and we will be more than happy to change this for you.
Your Rights as a Website User
When it comes to processing your personal data, the GDPR grants you certain rights as a website user:
1. Right of Access (Art. 15 of the GDPR):
You have the right to request confirmation as to whether personal data concerning you is being processed; where this is the case, you have a right of access to this personal data and to the information specified in Article 15 of the GDPR.
2. Right to Rectification and Right to Erasure (Art. 16 and 17 of the GDPR):
You have the right to immediately request the rectification of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.
You also have the right to request that personal data concerning you be erased immediately if one of the reasons listed in Art. 17 of the GDPR applies in detail, e.g. if the data is no longer required for the purposes for which it was collected.
3. Right to Restriction of Processing (Art. 18 of the GDPR):
You have the right to request a restriction of processing for the duration of a review if any of the conditions specified in Art. 18 of the GDPR have been met, e.g. if you have lodged an objection to the processing.
4. Right to Data Portability (Art. 20 of the GDPR):
In certain cases (which are outlined in detail in Article 20 of the GDPR), you have the right to obtain from us your personal data in a structured, standard, machine-readable format or to request the transfer of such data to a third party.
5. Right to Object (Art. 21 of the GDPR):
If data is collected on the basis of Art. 6(1)(f) of the GDPR (data processing on the grounds of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. If you make such an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
6. Right to Lodge a Complaint with a Supervisory Authority:
In accordance with Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. This right to lodge a complaint may particularly be exercised before a supervisory authority in the EU member state where you reside, work, or where you suspect that your rights have been infringed.
If a provision of this policy is or becomes illegal, invalid or unenforceable in any jurisdiction, that shall not affect:
the validity or enforceability in that jurisdiction of any other provision of this Agreement; or
the validity or enforceability in other jurisdictions of that or any other provision of this Agreement.
Data Protection Officer
Our data protection officer will be happy to provide you with information or suggestions on the topic of data protection:
8/5 Rama IX Alley, Lane 26-6
Bang Kapi, Huai Khwang
Phone: +66 656 430 630