Privacy Policy

This Personal Data Protection Policy sets out appropriate methods for handling personal data and appropriate security measures to protect the personal data of customers that the Company collects, uses and discloses, in compliance with personal data protection law and other applicable laws and regulations.

1. Definitions

• Company means Oranoss Company Limited.
• Data subject means a person who owns personal data that the Company collects, uses or discloses.
• Data means personal data, non-personal data, system data, location data and cookies.
• Personal data means information about a person that identifies that person, directly or indirectly, under the Personal Data Protection Act B.E. 2562 (2019), as amended, and other related laws.
• Sensitive personal data means personal data about race, ethnicity, political opinions, cult, religious or philosophical beliefs, sexual behaviour, criminal records, health data, disability, trade union data, genetic data, biometric data, or any other data that affects the data subject in a similar way as announced by the Committee.
• Biometric data means personal data resulting from technical processing of a person's physical or behavioural characteristics that allows the unique identification of that person, such as facial images, iris data or fingerprint data.
• Public data means personal data that the data subject has made public, such as social media profile data used when signing in to any Company service with social media credentials (e.g. Facebook, Instagram, Twitter, Line or other platforms), including the social media account ID, interests, likes and friend lists. The data subject can control this through the account settings provided by the social media provider.
• Data controller means a person with the authority to decide on the collection, use or disclosure of personal data.
• Data processor means a person who collects, uses or discloses personal data on the instructions of, or on behalf of, a data controller.
• Data processing means any operation performed on personal data or sets of personal data, whether automated or not, such as collection, recording, organisation, structuring, storage, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• Application means a program or set of instructions that controls mobile computers and peripheral devices to perform tasks and meet user needs, with a User Interface (UI) as the means of interaction.
• IP address means a numerical label assigned to each device, such as a computer or printer, on a computer network that uses the Internet Protocol to communicate.
• Cookie means a small piece of data that the Company's website sends to an internet-connected computer or electronic device to store information. The cookie is sent back to the originating website each time you return to it.
• Log means data generated by using an application, including origin, source, destination, route, time, date, volume, duration, type of service and other information related to its use.
• Non-identifiable data means data that has been anonymised.
• Office means the Office of the Personal Data Protection Committee.

Personal data protection policy

The Company recognises and places great importance on the rights and privacy of data subjects. The Company applies strict measures to maintain security and confidentiality and to prevent the use of personal data without the data subject's prior permission. The Company acts in line with the purposes and consent given by data subjects regarding the collection, use or disclosure of their personal data, or as required by law and in line with international standards.

2. How we obtain data

The Company collects personal data through the following:

• Other services beyond those set out on the Company's website, such as other products or services operated by the Company that are not expressly stated to be subject to this policy.
• Personal data from third parties, such as agents, shops, data collection service providers, business partners and alliances.
• Personal data received when you visit the website, such as your internet service provider and IP address, the date and time of your visit, the pages you view, and the address of any website that links directly to the Company's website.
• Application usage behaviour, through logs of your use of the Company's applications.
• Personal data from public records and non-public records that the Company is legally entitled to collect.
• Personal data received from government agencies or regulators exercising legal authority.

3. Purposes of collection, use and disclosure

The Company collects, uses or discloses personal data for the following purposes:

• To provide and improve the Company's services, including future services, and to maintain and operate those services.
• To carry out transactions related to the management of condominium juristic persons, housing estate juristic persons and similar.
• To manage the relationship between the Company and the data subject.
• To verify and/or identify the data subject when using services through various channels or contacting the Company.
• To communicate, notify and/or send news and information from the Company, or changes affecting the Company.
• To act on requests that the data subject has made to the Company.
• To offer benefits and/or other Company services, such as advice and/or offers about services, including transactions related to the use of Company services.
• To run the Company's business, such as data analysis, auditing, and developing, improving or changing services.
• To take any necessary and appropriate action to:
  • detect and prevent actual or potential breaches of the law;
  • respond to requests from government authorities, including foreign government authorities where the data subject lives;
  • enforce the Company's terms of service and personal data policies;
  • protect the Company's business operations;
  • protect the privacy, safety or property of the Company, its staff, data subjects or others;
  • remedy, prevent or limit potential damage.
• To comply with the law, investigations by officials or regulators, or rules, regulations or obligations imposed by law or the government.

Data subjects will be informed of any other purposes not listed above when the Company requests to collect their personal data. The Company will collect, use or disclose your personal data for the purposes in section 3 only when one of the following conditions applies:

• You have given your consent to the Company in accordance with the law.
• It is to prevent or suppress a danger to a person's life, body or health.
• It is necessary to carry out a task in the public interest or to exercise official authority vested in the Company.
• It is necessary for the legitimate interests of the Company or another person or legal entity, unless those interests are overridden by your fundamental rights in your personal data.
• It is necessary to comply with the law.
• It is for historical documents or archives in the public interest, or for research or statistics, with appropriate safeguards to protect your rights and freedoms.

4. Purposes of processing personal data

Personal data

Name, email, address, office address, phone number, national ID number, passport number, date of birth, nationality, gender, settings, account security settings, and other related data collected for the stated purposes.

When you visit the Company's website, you may be asked to register with the Company and/or provide your personal data for the Company's marketing purposes, such as:

• to contact you and offer Company services or other offers you may have shown interest in;
• to inform you about news, products and newsletters;
• to verify your identity;
• to keep your user account secure;
• to inform you about upcoming changes.

IP address

• To verify your identity.

Browsing behaviour data

Browser type, domain, websites visited, time of visit, referring website address, customer support data and logs.

• To provide access to and use of the Company's website and applications.
• To manage the website and applications.
• For internal operations, troubleshooting, data analysis, testing, research, security, fraud detection and user account management.
• To fix and investigate system issues.
• To improve the user experience.

Location data

• The website uses data collected by cookies for statistical analysis or other Company activities to improve its services.

Cookies

• The website uses data collected by cookies for statistical analysis or other Company activities to improve its services.

5. Personal data collected

The Company collects data that data subjects provide directly, or personal data the Company receives from its services or operations through any channel.

Cookies are data placed on your computer by a web server. Once placed, a cookie stores or remembers user information until you close the browser or delete or refuse the cookie. Cookies make it easier to navigate the website, as they help store information about the pages you visit.