Privacy Policy​

          Clause 1. This announcement is entitled 'Announcement of the Department of International Trade Promotion on Personal Data Protection Policy B.E. 2565'
          Clause 2. This announcement shall come into force from now on.
          Clause 3 in this announcement

           'Department' means the Department of International Trade Promotion.
           'Person' means a natural person.

           'Personal Data' means information about an individual by which that individual can be identified. either directly or indirectly but does not include the information of the deceased in particular.

           'Sensitive Personal Data/Special Categorized Personal Data' means personal data relating to race, ethnicity, political opinions. Beliefs in creeds, religions or philosophies Sexual behavior Criminal record Health information Disability union information genetic information or biological data

           'Biodata' means personal data arising from the use of techniques or technology. related to the introduction The physical or behavioral features of a person can be used to identify that person unlike other people, such as facial simulation data. iris simulation data fingerprint simulated data

            'Data subject' means the person to whom the personal data has been identified and made available to them. can identify that person
            'Data Controller' means a person or juristic person who has decision-making powers. About the collection, use or disclosure of personal information
            'Data Processor' means a person or a juristic person. which is processed personal data on behalf of or on the orders of the data controller
            'Processing of personal data' means the collection, use or disclosure of personal data.

             Article 4 Purpose of processing personal data

             The department has a mission about export promotion, expanding the market for Thai products and services. develop and build The value added of export products and services Provide trade information and increase the competitiveness of Thai entrepreneurs in the global market to increase the value and volume of Thailand's exports. Benefits in carrying out missions and authority of the Department as well as management within the organization to support carry out various missions Achieve goals according to the authority of the Department, including

              (1) Propose policies and prepare export targets and action plans. including suggestions guidelines and measures Trade and Marketing
              (2) Take action to promote, develop and support Thai exports of goods and service businesses. both domestically and internationally
              (3) to prepare and provide trade information services and to promote information technology in the related to exports to manufacturers, Thai exporters, service operators and importers abroad
              (4) Disseminate and publicize Thai products and services to promote exports.
              (5) Develop knowledge and competency of the private sector in international trade in order to strengthen capacity in competition and performance in exports as well as coordinating and cooperating with various institutions and organizations both domestically and internationally
              (6) Promote and develop product styles and brands to add value to Thai products. and according to demand of foreign markets
              (7) Support and develop trade logistics system
              (8) Handling official work, treasury work, accounting work, internal audit work, procurement work, legal work, international relations work and transportation formalities.
              (9) To perform any other acts as prescribed by law to be the powers and duties of the Department. or according to the Minister or the Cabinet assigned

              In addition, the Department can collect, use and/or disclose personal data of personal data subjects for the following purposes.

              4.1 Objectives for which consent is required by the Department
                  The Department relies on the personal data subject's consent to collect, use and/or disclose personal data. for the following purposes
                  Where it is necessary to transfer personal data of personal data subjects to countries that may not have a level of adequate protection of information; and
                  in collecting, using and/or disclosing personal data of personal data subjects for use in Publicize projects or activities of the Department; and
                  To collect, use and/or disclose personal data of the data subject for communication purposes. Present and publicize information, news, projects, new activities of the Department to the owners of personal data and
                  In collecting, using and/or disclosing sensitive personal data of the personal data subject, in order to provide food that is suitable for the data subject's health.

              4.2 Objectives that the Department may undertake based on legal exemptions in collecting, using and/or disclosing personal data of data subjects without obtaining consent.
Relying on the following legal basis or basis for collecting, using, disclosing personal data of the owner. Personal information, which includes
              (1) it is necessary for the performance of the contract for entering into an employment contract or performing an employment contract with the owner of personal data
              (2) it is the performance of duty according to the law
              (3) it is necessary for legitimate interests
              (4) for the prevention or suppression of danger to life, body or health of a person
              (5) for the performance of duties in carrying out missions for the public interest or performing duties in exercising state power at the Department assigned

              In this regard, the Department will rely on the exceptions in (1) to (5) above for the collection, use and/or disclosure of personal data. of the owner of personal data for the following purposes
              a. Performance of a contract to which the data subject is a party or a request before entering into that contract
              B. Consideration for recruitment and selection of trainees or project participants of the Department
              C. Identity Verification and Coordination
              D. Organizing training/seminars Testing and Certification
              E. follow up results and/or the progress that the personal data subject receives from participating in the training, project, or activities of the Department (follow-up).
              f. To create opportunities for international trade especially the export for Thai entrepreneurs through introduction/business matching between buyers/importers of Thai goods/services and Thai entrepreneurs (Business Matching)
              g. Analyze data to plan international trade development and promotion activities to suit the needs. of each area or group of individuals or individuals
              H. Others reasonably required by the Department. as notified to the owner of personal data in the document or method Or any other relevant channels, then the Department will not collect, use and / or disclose the owner's personal information. personal information In addition to the objectives that the department has notified to the owner of personal data, unless notifying the new purpose to the owner of personal information and obtain consent from the owner of the personal data Or is it legal? Set exceptions for not requiring consent.

              Article 5 Processing of personal data

              5.1 Collection of Personal Data
The Department will collect personal information as necessary. both physically and physically electronics According to the mission and objectives of the operation of the Department as specified in Article 4 with the right method. law and fairness There are security standards and there is a control over access to personal information. personal information With the consent of the subject of personal data or when there is an exception According to the law, personal data can be collected without the consent of the data subject only.
              Department will use lawful methods to collect, use and/or disclose personal data of personal data subjects. and only to the extent necessary for the purpose of collecting, using and/or disclosing personal data as specified in Clause 4 and in accordance with the provisions of the law.
              The Department collects, uses and/or discloses the personal data of the personal data subjects who have provided or are with the Department. Or that the Department has received or accessed from other reliable sources, such as information that the owner of personal information has disclosed to the public. or from other government or private agencies that are partner agencies of the Department
              In the event that the data subject does not provide personal data or providing incorrect or out-of-date personal information to the Department may affect the personal data subject who is unable to transact with the Department or may not be convenient or has not been fulfilled by an existing contract with the Department And may cause the owner of the personal information to be damaged or lose the opportunity. and may affect the compliance with any laws that the personal data subject or the Department is subject to.
              Personal data that the Department collects, uses and/or discloses can be divided into 2 types as follows:
              (1) general personal data such as
                  (1.1) Identity information of the data subject (Identification Information) and contact information with the owner of personal information such as name and surname ID number Information that appears in the copy of the ID card Passport number, picture, gender, date/month/year of birth, age, status, address, occupation, workplace, telephone number fax number Electronic mail (E-mail address)
                  (1.2) Work related information such as position or rank, job position, work department, contract details personal record educational record work history, etc.
              (2) Personal data that is sensitive data (Sensitive Data), such as biometric data, fingerprint data, scanned images, faces (face scan / face recognition), criminal history data including alleged offenses or prosecution, health data, etc.
The Department does not have a policy to collect personal information that is sensitive information of the personal information owner. except in case that the Department has received the express consent of the owner of the personal data or any other case as the law provides for exemptions Can be collected without obtaining the consent of the personal data subject.
              5.2 Use of personal data
              The Department will use personal data in accordance with the mission and operational objectives of the Department specified in Article 4 upon obtaining the consent of the data subject. or when there is any other case under the provisions of the law that can be carried out
              5.3 Disclosure of Personal Data
              The Department will disclose personal information in order to perform the missions and operational objectives of the Department specified in Article 4, or to provide services to the owner of the personal information upon request. or in accordance with contractual obligations upon obtaining consent from the owner of personal data or as required by law to disclose
              In this regard, individuals or juristic persons who receive personal information from the disclosure of the Department must not use or disclose information personal data for any purpose other than the purpose reported to the Department to obtain that personal data
The Department will disclose the personal information of the personal information subject to other personal information controllers according to the purposes. that the department has notified to the owner of the personal data only The department will disclose the personal information of the owner of the personal information. In the following cases
              (1) The Department obtains consent from the owner of the personal data.
              (2) Necessary for any transaction or activity of the owner of personal data to be able to take action by achieving                          Objectives of the subject of personal data including the performance of the contract that the data subject is the contracting party or at the request of the data subject
              (3) It is necessary for legitimate interests such as disclosure to juristic persons or organizations for Take action to detect and prevent fraud. Recording of meetings or transactions with the Department for treatment department security, etc.
              (4) Compliance with laws or regulations or orders or announcements of regulatory authorities. or official agencies with legal authority such as the Ministry of Commerce ministry of labor Social Security Office Department of Skill Development, Department of Legal Execution, Student Loan Fund Office of Quality of Life Promotion and Development National Persons with Disabilities Court, Legal Execution Department, Police, Office of the Public Sector Development Commission budget bureau or other government agencies, etc., as required by law. for compliance with laws and regulations or legal obligations
              (5) to disclose to a person or a juristic person or partner agencies or any other organization who are external service providers of the Department (Outsource / Service Provider) or contractors such as banks, payment service providers information system provider human resources training provider or financial service provider access to personal data of personal data subjects For the processing of personal data of personal data subjects for the purposes specified in clause 4 of this Policy.

              If the Department later changes the purpose of collecting, using and disclosing personal data The department will notify the owner of the personal data that the department collects and stores through documents/books. or electronic mail or department website (www.ditp.go.th) or information technology system related to the Department as appropriate. Along with this, the Department has also required that the amendment be recorded as evidence as well.

              Article 6 Rights of Personal Data Subjects
Personal data subjects have rights relating to their personal data which are under the control of the department. According to the Personal Data Protection Act B.E. 2562 as follows:
              6.1 Right to withdraw consent for the personal data controller to collect, use or disclose data Personal data that the data subject has previously provided for the purpose specified by the data subject. Such consent can be revoked throughout the period that the data controller has stored the personal data of the data subject. the owner of that personal data Unless there are restrictions on such rights according to the law or the contract that the owner of the personal data provided to the Department
              6.2 Right of access Obtain a copy of the personal data relating to him/her that is under the responsibility of the personal data controller and disclose the acquisition of such personal data for which he/she has not given consent.
              6.3 The right to obtain personal data relating to him or her from the data controller In the event that the controller of personal data has made that personal information in a form that is generally readable or usable by a working tool or device; by means of automation And can use or disclose personal information by automated means. Including having the right to ask the controller Personal data is sent or transferred in such form to Other personal data controllers when it is possible to do so by automatic means and have the right to obtain the personal data sent or transferred by the personal data controller in such form. directly to another data controller unless technical conditions cannot do so
The exercise of such right will apply to the transmission or transfer of Personal Data of the Personal Data Controller, which is the practice. Duties for the public interest or the performance of duties under the law cannot be performed.
              6.4 The right to object to the collection, use or disclosure of your personal data at any time in the following cases:
              (1) in the case of personal data that is exempt from the personal data controller's ability to collect data Personal data can be retained without consent. due to one of the following cases
                  (1.1) In the case of necessity for the performance of missions for the public interest of the controller. personal information or performing duties in exercising state powers that have been given to the data controller
                  (1.2) It is necessary for the legitimate interests of the Personal Data Controller or of other persons or juristic persons who are not the Personal Data Controller.
              (2) In the case of collecting, using or disclosing personal data For direct marketing purposes
              (3) In the case of collecting, using or disclosing personal data for research purposes scientifically historical or statistical, unless it is necessary for the public interest of control personal information
              6.5 Right to delete or destroy or make personal information non-personally identifiable to the owner personal information In the following cases
                   (1) when their personal data is no longer necessary for the purpose of collection, use or disclosure of personal data
                   (2) When the Personal Data Owner has withdrawn his consent to the collection, use, or disclosure of his Personal Data, or when the Personal Data Owner has objected to the collection, use, or disclosure of his Personal Data.
                   (3) When their personal data has been collected, used or disclosed unlawfully
              6.6 Right to suspend the use of their personal data in the event that their personal data has to be deleted or destroyed Because it is information that has been collected, used or disclosed illegally. or their personal data no need for preservation
              6.7 The right to request the data controller to ensure that their personal data is accurate, current, complete and not misleading.
              6.8 The right to lodge a complaint to the expert committee under the law on personal data protection in the event that the department or the data processor Including employees or contractors of the Department or data processors violate or fail to comply with the law on personal data protection. or announcements issued under such laws at
Office of the Personal Data Protection Commission
              7th floor, Ratthaprasasanaphakdi Building Government Center Commemorating His Majesty the King's 80th Birthday Anniversary
              Chaeng Watthana Road, Thung Song Hong, Lak Si, Bangkok 10210

              Article 7 Data Storage Period
              The Department will store personal data of personal data subjects for as long as necessary for compliance. Purposes notified to the data subject or according to the purposes set forth in Article 4 of this policy, or when there is no longer a need to keep that personal data. or end the transaction with the Department or there is no use of service or transactions with the Department The department will store the personal information of the subject of personal data for a specified period of time thereafter or stored for the period specified by law or according to age or for the exercise of legal claims. or destroy personal information or make personal information non-identifiable The person who is the owner of the personal data. The retention period of personal data will be in accordance with Store personal information (Data Retention Policy) of the Department. The Department may retain personal information of the owner. Personal data for the period required by law
storage of personal information If it is in the form of an e-book, proceed according to the regulations of the Office of the Prime Minister. In this regard, the storage period of such personal data shall be in accordance with the first paragraph of Article 7.

              Article 8 Quality of personal data
              The Department collects, collects, uses and discloses personal information for the benefit of the operations of the Department's mission, authority, and operational objectives. and according to the role of the department supporting the department in which the Department will give advice Important to the accuracy, completeness and currentness of the collected personal data.

              Article 9 Restrictions on the Use of Personal Data
              The Department will not use the collected personal information for use or disclosure to anyone other than Operational objectives according to the mission, authority, operational objectives of the Department and division roles support of the department unless receiving consent from the owner of the personal data or there are exceptions allowed by law allow the Department to use or disclose personal data without obtaining consent from the personal data subject, for example, in the case of disclosure of data to contractual parties who provide services with the Department that requires personal data

              Article 10 Security
              The Department has appropriate standards for maintaining the security of personal information. The Department will maintain confidentiality, integrity, and usability. (availability) of personal data in order to prevent loss, access, destruction, use, change, correction or disclosure of personal data without Unauthorized or unlawful And not lower than what is specified in the announcement of the Ministry of Digital Economy and Society on Personal Data Security Standards B.E. 2563 or according to the announcement of the Commission Protection of personal data

              Article 11 Participation of Personal Data Subjects
              The department will provide a channel for the owner of personal data. can verify the existence and validity Including the right Revoke consent, access, correction, deletion, objection to the processing of personal data. through the book or electronic mail or department website (www.ditp.go.th) or the information technology system of the Department as appropriate.

              Article 12 Information relating to third parties
              If any person provides personal data of other personal data subjects, such as providing personal data of spouses, children, parents, family members beneficiary Persons who can be contacted in case of emergency, references and other persons related to the holding of securities of that person to the Department. The person certifies the authority and permission of the owner. personal information to provide personal information of such persons to the Department and has a duty to notify the owner of personal information acknowledge the collection Use and/or disclose such personal data in accordance with this Personal Data Protection Policy, including obtaining consent from the relevant data subject.

              Article 13 Policy Changes
              The department will conduct regular policy reviews to ensure compliance with the law. and relevant practices if there is a change to the personal data protection policy Department will proceed to notify the owner of the personal information. and ask for consent in advance every time, in accordance with the rules and procedures prescribed by the Department

              Article 14 Personal Data that the Department collects before the law comes into force (Provisional Provisions)
The Department will collect and use personal information that the Department has collected before the Act. Personal Data Protection B.E. 2562 (2019) will continue to be effective according to the original objectives Such consent is allowed to proceed. through the book or electronic mail or department website (www.ditp.go.th) or the information technology system of the Department

              ARTICLE 15 APPLICABLE LAW AND JURISDICTION
              This Privacy Policy is governed by and construed in accordance with the laws of Thailand and the courts of Thailand shall have jurisdiction. In determining any disputes that may arise

              Article 16 Contacting the Department
              Department of International Trade Promotion (Bang Kra Sor)
              563 Nonthaburi Road, Bang Krasor Subdistrict, Mueang District
              Nonthaburi 11000
              or
              Personal Data Protection Officer (DPO) at
              Email dpo@ditp.go.th
              Phone number 0-2507-7999