Krungthai Card Public Company Limited (“KTC”) is well concerned about the obligation of all privacy and confidential data protection of the KTC member and other general users. Furthermore, KTC has complied accordingly to the Personal Data (Privacy) Ordinance in collecting, storing and the usage of personal data of the KTC member that access to the service in www.ktc.co.th, (“Website”) and ClickKTC or TapKTC (“Applications”) under the account security standard of the KTC member at all times. KTC has especially complied accordingly to the following criteria, unless the KTC member has agreed otherwise as appropriate.
Scope of Policy
This policy is effective over the operation of KTC on the personal data of the KTC member that has received or recorded as the KTC member who has visited or accessed to the service of the Website/Applications of KTC. For the purpose of this policy, personal data means data that enable to designate the person such as name, surname, age, gender, nationality, identification number, passport number, address, telephone number, or E-mail address, etc., and shall be a member account data which cannot be disclosed widely to the public. This policy is effective over the visitation or accessing to the Website/Applications of KTC only, and shall not become binding to the websites of third parties that links to the Website/Applications of KTC or vice versa. Therefore, the KTC member shall understand the privacy protection policy of the third parties’ websites.
Personal Data Storage
In collecting the personal data from the KTC member that has accessed through the Website/Applications of KTC shall be made for the purpose of leasing, issuance of credit card, financial products and other beneficial related to the operation of KTC or service improvement to satisfy the KTC member. Personal data shall be strictly protected accordingly to the account security standard of the KTC member in order to prevent any personal data misusage of the KTC member. In storing personal data of the KTC member, KTC shall establish a protection system to prevent any data editing that cause a loss or damage or without any authorization. The KTC member is entitled to edit his/her personal data as stored by KTC. To this extent, KTC shall comply with the request to access or edit the personal data of particular member accordingly to the relevant act. In every stage of operation, there shall be a procedure to ensure that the personal data of the KTC member is correct and shall not be stored for an unreasonably long period of time or dispose accordingly to the regulations on period of storing internal data of KTC.
The Usage and Disclosure of Personal Data
Personal data of the KTC member shall be treated as confidential. Any disclosure of personal data of the KTC member shall be made to the extent as authorized by KTC only. KTC shall protectively store personal data of the KTC member to prevent any misusage, and shall not allow unauthorized user to access or use the data. KTC shall also not to exchange or disclose the personal data to any person unless by following cases:
KTC has notified the member for any disclosure of such data or has been authorized by such KTC member; KTC is required to disclose the data by the law, court order, order of Bank of Thailand or authorities which supervise the operation of KTC under the law as in case maybe;
To disclosure of data to the National Credit Bureau (NCB) or other authorities with a similar duty (if any); To disclose of data as necessary for the inspection, protect, or any operation in relation to the violation of law, or any doubt for the fraud, money laundry, cases that cause an impact on the national security or cause an impact on safety to wellbeing, life and body of other person; The usage of data of the KTC member for the purpose as specified in this policy shall be operated by the related KTC staffs with prior authorization only. Any necessity to hire the outsource to satisfy the such purposes or to develop or improve the KTC system, KTC shall supervise the outsource to store and use the data that specifically authorized by KTC under the specified purposed only, and shall enforce the outsource to comply accordingly to the regulations and conditions of account security of the KTC member, as well as strictly comply the law on privacy.
The Security System
KTC has established the account security standard of the KTC member to properly protect the personal data of the KTC member and strictly comply with to the confidentiality protection of personal data for the purpose of preventing the loss, access, damage, use, alter, edit, disclose or breach of personal data of the KTC member by unauthorized person or unlawful action. The personal data of the KTC member shall be protected from unauthorized or unintentional incident to access, process, or deletion.
The Visitation of Website/Applications
In case where the KTC member does not register with KTC or does not intend to receive the updated information from KTC, he/she may visit the Website of KTC without any declaration of personal information to KTC in order to conduct a search for information and products/services of KTC. KTC may use software for collecting the data for web search record or provide the service on educational application to study the activity of the visitors, and improve the Website/Applications to consistently reach the target group. To this extent, the data collected by KTC are search category, most interested data, date/time and time duration for visiting the Website or accessing to the Applications service, webpage browsing before and after usage of the Website/Application of KTC, etc.
The Usage of Cookies and other Technology
The Website and Applications of KTC may use “Cookies” and Access Permission type as technology on Applications for the use of functions on Smart Devices of the KTC member such as E-mail address, login data such as IP address, browser, username-password, notification, location information, request of permission to activate the mobile camera, photo album, device information, request of permission to use the telephone call function, , in order to facilitate KTC to access to the activities of the KTC member who has visited the Website or use the Applications in depth, evaluate the number of visitors, inspect the frequency of the operation, type of visitation or the usage record statistic in which such technology will facilitate KTC to understand and analyze the tendency for usage of the Website and Applications, and to develop the products/services including the presentation of benefits to satisfy the KTC member the variety of demand.