Introduction

THAITAXISERVICES recognizes the importance of protecting personal data. This Privacy Notice outlines how we collect, use, and disclose your personal information in compliance with legal standards. Any updates or revisions to this policy will be posted on our website. This notice is part of the terms and conditions of using our services, including access to the content, features, and technologies provided on our website, mobile applications, and related services, both current and future.

1. Definitions

• “Personal Data” refers to information that can directly or indirectly identify an individual, divided into general personal data and/or sensitive personal data.

• “General Personal Data” includes identifiable information such as name, ID number, address, phone number, email, bank account details, etc.

• “Sensitive Personal Data” refers to information like race, religion, political opinions, health data, etc.

• “Location Data” refers to GPS, vehicle positions, travel data, and timestamps.

• “Personal Data Controller” refers to THAITAXISERVICES, responsible for data collection, use, or disclosure.

• “Processing Personal Data” refers to the collection, use, or disclosure of personal data.

2. Sources of Personal Data

THAITAXISERVICES collects personal data from the following sources:

2.1 Directly from you:

• During service applications or rights request processes.

• Through voluntary participation in surveys, email communications, or other interactions.

• From the use of services and related products.

• Via cookies on our website.

• From purchases made online through our website, platforms, or promotional booths.

2.2 From third-party sources:

• Personal data obtained from external sources, such as online searches or inquiries. We will notify you within 30 days and seek your consent as required by law.

3. Purpose and Legal Basis for Processing Personal Data

3.1 Purpose of Processing

THAITAXISERVICES processes your personal data for the following purposes:

• To provide services in compliance with legal and regulatory requirements.

• To verify or identify you when using services.

• To improve service efficiency and customer relations.

• For communication via phone, SMS, email, or other channels.

• For business-related benefits like marketing, research, or service improvements.

• To facilitate billing and payments.

• For after-sales services and customer support.

• For safety and security purposes, such as CCTV and GPS tracking.

If there are any changes in these purposes, we will notify you via our website.

3.2 Legal Basis for Processing

THAITAXISERVICES processes personal data under the following legal bases:

• Contract: Data processed to fulfill a contract or pre-contractual steps.

• Consent: Processing that requires your explicit consent, which you can withdraw at any time.

• Legal Obligation: Data processed to comply with legal requirements.

• Legitimate Interest: Data processed for legitimate business purposes unless overridden by your rights.

• Vital Interest: Data processed to protect life or health.

• Research and Statistics: Processing for historical, research, or statistical purposes.

Sensitive data will only be collected with your explicit consent.

4. Data Storage and Retention Period

4.1 Data Storage

THAITAXISERVICES stores personal data in physical (hard copy), electronic (soft copy), and audio formats (voice recordings). We implement strong security measures to prevent unauthorized access, alteration, or disclosure.

4.2 Data Retention Period

• Data is stored as required by relevant laws (e.g., accounting laws, anti-money laundering laws).

• If no legal period is specified, data is kept only as long as necessary.

• Data will be stored for the contract duration and up to 10 years after contract termination or until legal obligations are fulfilled.

When the retention period ends, the data will be deleted or anonymized.

5. Contact Information

You can contact the Data Protection Officer (DPO) of THAITAXISERVICES to submit any requests regarding your personal data rights through the following contact channels:

Email: [email protected]

Phone [TH] +66 (0)2 942 4114

6. Rights of Data Subjects

THAITAXISERVICES may collect, use, disclose, or process your personal data lawfully under the Personal Data Protection Act. You have the following rights:

6.1 Right to Withdraw Consent

You can withdraw your consent at any time, except where limited by law or contract.

6.2 Right to Access

You have the right to access and request copies of your personal data.

6.3 Right to Rectification

You can request corrections or updates to your personal data.

6.4 Right to Erasure

You can request deletion or anonymization of your personal data in specific circumstances.

6.5 Right to Restriction of Processing

You may request a temporary halt in data processing during investigations.

6.6 Right to Data Portability

You can request that your data be transferred to another data controller.

6.7 Right to Object

You have the right to object to the processing of your data for legitimate interests or direct marketing.

6.8 Right to Complaint

You can file a complaint with the Personal Data Protection Committee if there is a violation of the law.

Additionally, THAITAXISERVICES will only collect, use, and disclose personal data of minors under 10, incapacitated persons, or those with legal guardianship with the explicit consent of the legal guardian. If consent is not obtained, the data will be deleted unless there is a legal basis to retain it.

If you wish to exercise any of the rights from 6.1 to 6.7, you can contact our office or Data Protection Officer (DPO) or download the relevant forms from our website.

7. Categories of Entities to Whom Personal Data May Be Disclosed

THAITAXISERVICES may disclose personal data to the following entities:

7.1 Group companies, subsidiaries, and affiliates.

7.2 Service providers:

Professional advisors, IT infrastructure providers, marketing, payment systems, financial institutions, and cloud service providers.

7.3 Business partners under agreements.

7.4 Assignees or transferees in cases of business transfer or restructuring.

7.5 Authorities as required by law or court orders.

We ensure proper data security even when transferred to countries with lower data protection standards.

8. Collection and Use of Personal Data in the Form of Cookies

www.thaitaxiservices.com may collect information about your interests and website usage via cookies on our website and applications. This helps us tailor our services to meet your needs. Cookies allow us to track your activity for improved user experience and targeted marketing. You can disable cookies in your browser settings. For more information, visit www.allaboutcookies.org

9. Collection and Use of Personal Data for Original Purposes

THAITAXISERVICES reserves the right to collect and use your personal data, which was collected prior to the enforcement of the Personal Data Protection Act, for its original purposes. If you no longer wish for us to continue using this data, you may withdraw your consent at any time by contacting us through the channels mentioned in section 5.

10. Privacy Policy of Other Websites

This Privacy Notice applies solely to the services and website of THAITAXISERVICES. If you access external websites through links on our site, you should review and follow the privacy policies of those websites separately. THAITAXISERVICES is not responsible for the content or data protection practices of third-party websites.

11. Security of Personal Data

THAITAXISERVICES recognizes the importance of personal data security and has implemented appropriate measures to prevent loss, unauthorized access, destruction, misuse, alteration, or unlawful disclosure of personal data. Access to personal data is restricted to employees, agents, or representatives who have relevant responsibilities, ensuring the confidentiality and security of your information.

In cases where THAITAXISERVICES assigns external agencies or individuals to collect, use, or disclose personal data on behalf of the company, these third parties will be required to maintain the confidentiality and security of your personal data. They are also obligated to prevent the use or disclosure of personal data for any other purposes without proper authorization or in violation of the law.