2. Definition
"Personal Data" means information about a person that enables to identify the person directly or indirectly but does not include the information of the deceased person in particular, such as:
4. Rights of the personal data subject
4.1 Right to withdraw consent : If the data subject has given consent for the company to collect, use or disclose personal data (whether consent is provided before or after the date of the Personal Data Protection Act), you have the right to withdraw your consent at any time for the duration of your data with the company unless there is a statutory restriction on that right or a contract that benefits you.
However, withdrawing your consent may affect the use of the product or services for your benefit. Therefore, it is advisable to study and inquire about the impact before withdrawing the consent.
4.2 Right to access information : The personal data subject has the right to request access to your data that is the responsibility of the company and can ask the company to make copies of it for you as well as ask the company to disclose how it obtained your data.
4.3 Right to request data transfer : The personal data subject has the right to request your data from the company including the right to ask the company to send or transfer personal data to other personal data controllers directly unless it can't be operated due to technical reasons.
4.4 Right to object : The personal data subject has the right to object to the collection, use, or disclosure of your data made for marketing purposes or scientific, historical, or statistical purposes at any time. Except collecting, using, or disclosing your data made for the necessary operations under the legitimate interests of the company or of other persons or entities without exceeding the extent to which you can reasonably anticipate or carry out a mission in the public interest. If you file an objection, the company will continue to collect, use and/or disclose your data only if the company can justify the law as being more important than your basic rights or asserting your legal rights, compliance with the law, or fighting legal action on each case.
4.5 Right to request erasure or destruction of data : Personal data subject has the right to request erasure or destruction of your data, or make personal information non-identifiable to you. If you believe that your data has been unlawfully collected, used, or disclosed by applicable law or deems that the company no longer needs to keep it following the objectives involved in this policy or when you have exercised the right to withdraw your consent or exercise your right to object as stated above.
4.6 Right to request to suspend the use of data : The personal data subject has the right to request that the use of the personal data be temporarily suspended if the company is under investigation under the request to exercise the right to amend your data or request your objections or any other case where the company is no longer necessary and has to delete or destroy your data in accordance with the relevant laws, but you may ask the company to withhold its use instead.
4.7 Right to request correction of information : The personal data subject has the right to request that your personal information be corrected, current, complete, and non-misleading.
4.8 Right to complain : The personal data subject has the right to complain to the relevant legal authority if you believe that the collection, use, or disclosure of your data is in a manner that violates or fails to comply with applicable laws.
4.9 The above-mentioned exercise of the personal data subject's rights may be limited under applicable law, and there are circumstances where it is necessary that the company may refuse or fail to perform the above request for your rights such as complying with laws or court orders in the public interest. Exercising rights may violate the rights or freedoms of other persons, etc. If the company refuses the above request, the company will also inform you of the reason for the rejection.
4.10 If you have any suggestions or would like to inquire about the details of collecting, using, or disclosing your personal information including requesting to exercise rights under this policy, you can contact the company or a personal data protection officer through the following channels:
Tel : 02-009-0888
Privacy Notice
Krungthai Mizuho Leasing Co., Ltd. (hereinafter referred to as the “Company”) attaches great importance to the protection of personal data and compliance with the personal data protection law including the Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”) and other applicable personal data protection laws and regulations (collectively, the “Law”) so that the personal data subject trusts that the company will maintain the personal data and provide appropriate security measures.
1. Objectives and Scope
- To protect the personal information of the data subject that the company has collected, used, or disclosed the personal information. According to the personal data protection law.
- This Policy shall be effective as of 1 June 2022 and is subject to further changes or revisions which shall be notified to you. The Company shall continue to review the effectiveness of this Policy from time to time.
- This Policy applies to the processing of Personal Data (as defined below) by the Company within Thailand. Any breach of the Law or this Policy will be taken very seriously, and disciplinary action may be taken.
2. Definition
"Personal Data" means information about a person that enables to identify the person directly or indirectly but does not include the information of the deceased person in particular, such as:
- Personal information such as first name, last name, age, date of birth, marital status, national identification number, passport number.
- Contact information such as place of residence, workplace, telephone number, email address, Line ID.
- Financial information such as financial history, assets list.
- Transaction information such as loans, investments.
- Device or tool information such as IP address, Cookie ID
- Other information such as website usage, sound, still image, animation, and any other information that is considered personal information under the Law.
However, the following information is not personal information, such as information for business contacts that do not identify an individual, such as company name, company address, company registration number, company phone numbers, email addresses for businesses, email addresses for a group of companies such as [email protected], anonymous data, etc.
"Sensitive Personal Data" means personal information that is sensitive and may risk unfair discrimination, such as race, ethnicity, political opinions, beliefs in cults, religions, or philosophy, sexual behavior, criminal record, health information both past and present and future predisposition, including diseases, operations and procedures, bodily and mental functions, and, disability, trade union information, genetic information, biological information including DNA, finger scan, facial scan, eye scan, bodily composition and movement, and blood type or other information which affects the owner of personal data similarly as specified in the notification of the Personal Data Protection Committee.
“Personal Data Owner” means an individual person who owns the personal information
“Personal Data Controller” means a person or juristic person who has the authority to decide the collection, use, or disclosure of personal information, which is Krungthai Mizuho Leasing Co. Ltd..
"Personal Data Processor" means a person or legal entity who acts in connection with the collection, use, or disclosure of personal data by the order or on behalf of the company, excluding employees of the company.
"Sensitive Personal Data" means personal information that is sensitive and may risk unfair discrimination, such as race, ethnicity, political opinions, beliefs in cults, religions, or philosophy, sexual behavior, criminal record, health information both past and present and future predisposition, including diseases, operations and procedures, bodily and mental functions, and, disability, trade union information, genetic information, biological information including DNA, finger scan, facial scan, eye scan, bodily composition and movement, and blood type or other information which affects the owner of personal data similarly as specified in the notification of the Personal Data Protection Committee.
“Personal Data Owner” means an individual person who owns the personal information
“Personal Data Controller” means a person or juristic person who has the authority to decide the collection, use, or disclosure of personal information, which is Krungthai Mizuho Leasing Co. Ltd..
"Personal Data Processor" means a person or legal entity who acts in connection with the collection, use, or disclosure of personal data by the order or on behalf of the company, excluding employees of the company.
3. Processing of personal data
3.1 Collection, use, and disclosure of personal information
The company collects personal data by collecting information as necessary and relevant to the purposes for which the personal data subject is informed and/or being requested consent before collecting, using, and disclosing personal data such as name-surname, email address, telephone number, national ID number, address, contractual terms and indebtedness, repayment details, etc. The company does not collect data, use or disclose personal data if the data subject does not consent, except where the company can do so as permitted by personal data protection law or other laws.
3.2 Obtaining informed consent
1) The company will inform the purpose of collecting, using, or disclosing personal information by clearly separating the parts from other texts in writing by having a form or message that is easily accessible, using easy-to-read languages, or not deceiving or mislead the data subject for such purposes.
2) Data subjects can choose which purposes to consent for and for the independence of consent. The company shall not have the condition to consent to collect, use or disclose personal information that is not necessary or relevant for contracting or providing services.
3) Keep a record of the personal data subject’s consent and withdrawal of consent when the personal data subject requests to be processed.
2) Data subjects can choose which purposes to consent for and for the independence of consent. The company shall not have the condition to consent to collect, use or disclose personal information that is not necessary or relevant for contracting or providing services.
3) Keep a record of the personal data subject’s consent and withdrawal of consent when the personal data subject requests to be processed.
3.3 Purposes for collection, use and disclosure of Personal Data
1) The Personal Data which we collect from you may be collected, used and/or disclosed for the following purposes:
a. Providing financial services of the Company such as Leasing, Hire-purchase, Factoring etc. including, but not limited to
- Convenience for you and other administration management such as property registration, insurance and other matter related to the agreement between the “Company” and you under the relevant contracts.
- Managing and taking charge of the car registration, the insurance application in accordance to the Road Accident Victims Protection Act B.E. 2535 (1992), the renewal of car plate, and annual car tax payment
b. Take action in relation to enforcement of debt collection as a result of non-payment of debt, which has occurred under and/or in relation to the relevant contracts such as leasing, hire-purchase, factoring etc., which may include, but not limited to, amount calculation, identification process, location research, notifying of overdue payment, following-up on overdue payment, filing of documents, debt collection process, transfer of received fund, seizure of assets, etc.
c. Maintain security on data protection.
d. Manage enquiries and requests from you.
e. Conduct lessee due diligence and personal identification in accordance with laws, regulations and policies including our internal policies
f. Collect and retain Personal Data for the purpose of the respective transaction, registration, license, permission, certification, authorization, acknowledgement, taxation or any other action to which the government official sign their signature or execute their authority for or related to the Company.
g. Maintain contact records of business partners.
h. Make disclosures of your information as permitted or required by applicable law, such as disclosures in connection with investigations, to enforce our rights or fulfill contractual or statutory obligations.
(Collectively, the “Purposes”). Please note that the list above is not exhaustive, although we have afforded our utmost ability to provide as complete a list as possible.
(Collectively, the “Purposes”). Please note that the list above is not exhaustive, although we have afforded our utmost ability to provide as complete a list as possible.
2) The Company may transfer your Personal Data to the Company’s subsidiaries or related companies or external service providers in Thailand so these service providers can perform certain tasks on our behalf, such as for cloud and non-cloud storage, recruitment, payroll, analytics, and general assistance, or when there is legal obligation or legitimate interest to do so, such as for audits and corporate sale or restructuring. We will rely on the same basis as notified or consented by you for these domestic transfer and processing activities. In such cases, we will ensure a standard of protection for the Personal Data so transferred that is comparable to the protection under the Law and our standards.
3) The Company may transfer your Personal Data to the Company’s subsidiaries or related companies or external service providers throughout the world so these service providers can perform certain tasks on our behalf, such as for cloud and non-cloud storage, recruitment, payroll, analytics, and general assistance, or when there is legal obligation or legitimate interest to do so, such as for audits and corporate sale or restructuring. If we have contract basis for any such processing, we will also rely on such for offshore transfer or processing. However, for non-contract basis transfer or processing, we will rely on your consent as given in your respective Consent Form. In such cases, we will ensure a standard of protection for the Personal Data so transferred that is comparable to the protection under the Law and our standards.
3) The Company may transfer your Personal Data to the Company’s subsidiaries or related companies or external service providers throughout the world so these service providers can perform certain tasks on our behalf, such as for cloud and non-cloud storage, recruitment, payroll, analytics, and general assistance, or when there is legal obligation or legitimate interest to do so, such as for audits and corporate sale or restructuring. If we have contract basis for any such processing, we will also rely on such for offshore transfer or processing. However, for non-contract basis transfer or processing, we will rely on your consent as given in your respective Consent Form. In such cases, we will ensure a standard of protection for the Personal Data so transferred that is comparable to the protection under the Law and our standards.
3.4 Personal data retention
1) Your Personal Data will be retained for period(s) as are necessary to meet the Company’s legal and/or business purposes, and the Company will cease to retain your Personal Data as soon as it is reasonable to assume that the purpose for collection such Personal Data is no longer being served by such retention, and such retention is no longer necessary for legal and/or business purposes. Our current policy is to retain certain Personal Data of you for up to [ten (10) years] after the last contract or transaction, subject to the applicable anonymization procedures and at all times in accordance with our document retention and disposal policy, and applicable laws and regulations.
2) We will notify you if there is any change in policy or specific retention of any of your Personal Data that is not in line with the current policy, or is in any way relevant and warrants your special attention.
2) We will notify you if there is any change in policy or specific retention of any of your Personal Data that is not in line with the current policy, or is in any way relevant and warrants your special attention.
4. Rights of the personal data subject
4.1 Right to withdraw consent : If the data subject has given consent for the company to collect, use or disclose personal data (whether consent is provided before or after the date of the Personal Data Protection Act), you have the right to withdraw your consent at any time for the duration of your data with the company unless there is a statutory restriction on that right or a contract that benefits you.
However, withdrawing your consent may affect the use of the product or services for your benefit. Therefore, it is advisable to study and inquire about the impact before withdrawing the consent.
4.2 Right to access information : The personal data subject has the right to request access to your data that is the responsibility of the company and can ask the company to make copies of it for you as well as ask the company to disclose how it obtained your data.
4.3 Right to request data transfer : The personal data subject has the right to request your data from the company including the right to ask the company to send or transfer personal data to other personal data controllers directly unless it can't be operated due to technical reasons.
4.4 Right to object : The personal data subject has the right to object to the collection, use, or disclosure of your data made for marketing purposes or scientific, historical, or statistical purposes at any time. Except collecting, using, or disclosing your data made for the necessary operations under the legitimate interests of the company or of other persons or entities without exceeding the extent to which you can reasonably anticipate or carry out a mission in the public interest. If you file an objection, the company will continue to collect, use and/or disclose your data only if the company can justify the law as being more important than your basic rights or asserting your legal rights, compliance with the law, or fighting legal action on each case.
4.5 Right to request erasure or destruction of data : Personal data subject has the right to request erasure or destruction of your data, or make personal information non-identifiable to you. If you believe that your data has been unlawfully collected, used, or disclosed by applicable law or deems that the company no longer needs to keep it following the objectives involved in this policy or when you have exercised the right to withdraw your consent or exercise your right to object as stated above.
4.6 Right to request to suspend the use of data : The personal data subject has the right to request that the use of the personal data be temporarily suspended if the company is under investigation under the request to exercise the right to amend your data or request your objections or any other case where the company is no longer necessary and has to delete or destroy your data in accordance with the relevant laws, but you may ask the company to withhold its use instead.
4.7 Right to request correction of information : The personal data subject has the right to request that your personal information be corrected, current, complete, and non-misleading.
4.8 Right to complain : The personal data subject has the right to complain to the relevant legal authority if you believe that the collection, use, or disclosure of your data is in a manner that violates or fails to comply with applicable laws.
4.9 The above-mentioned exercise of the personal data subject's rights may be limited under applicable law, and there are circumstances where it is necessary that the company may refuse or fail to perform the above request for your rights such as complying with laws or court orders in the public interest. Exercising rights may violate the rights or freedoms of other persons, etc. If the company refuses the above request, the company will also inform you of the reason for the rejection.
4.10 If you have any suggestions or would like to inquire about the details of collecting, using, or disclosing your personal information including requesting to exercise rights under this policy, you can contact the company or a personal data protection officer through the following channels:
Address : Krungthai Mizuho Leasing Co., Ltd.
No. 98 Sathorn Square Office Tower, 33rd Floor, Room No. 3307-3313, North Sathorn Road, Bangkok, Silom, Bangkok 10500
No. 98 Sathorn Square Office Tower, 33rd Floor, Room No. 3307-3313, North Sathorn Road, Bangkok, Silom, Bangkok 10500
Tel : 02-009-0888