ไทย
English
Academy
Career
Contact
TBN Corporation Public Company Limited (hereinafter referred to as "the Company" or "TBN") recognizes the importance of personal data protection. As a "Data Controller" under the Personal Data Protection Act B.E. 2562 (including any amendments and related subordinate legislation), the Company has prepared this Privacy Notice to explain and inform you of the details regarding the collection, use, and disclosure (collectively referred to as "Processing") of your personal data when you access and use the Company's various services, including but not limited to the use of the website https://tbn.co.th, as well as any related applications or other platforms (collectively referred to as "Services").
This Notice covers informing you and ensuring you understand your rights as a "Data Subject" and the channels available for exercising such rights, as detailed below.
Corporate representatives, legal entities, business partners, customers, and B2B contacts, including directors, representatives, or authorized persons of such organizations
Users or visitors of the Company’s website, as well as other related platforms
Job applicants, interns, and individuals who may be considered for employment, including referees
Participants in events, seminars, workshops, or other marketing activities of the Company
Individuals who register to receive information, request demonstrations, obtain products/services, download documents, or complete forms through the Company’s various channels
Related persons whose personal data is provided or disclosed to the Company and who have a relationship with the Company’s customers, business partners, or service users, such as authorized persons, coordinators, or other related individuals
Contact Information: such as full name, job title, organization/company name, address, email, telephone number, and social media accounts.
Business Information: such as organization size, industry type, business needs, and estimated budget.
Contract or Financial Transaction Information: such as tax invoice address, quotation information, and payment details.
Job Applicant Information: such as educational background, work experience, and reference information.
Other Information: such as information you provide through questionnaires, event registration forms, feedback, requests for system demonstrations, products/services, and messages used to communicate with the Company.
Technical and Website Usage Data: such as IP addresses, web pages visited, duration of use, browser type and version, operating system, and screen resolution.
Cookies and Tracking Technologies: Please refer toCookie Policy for further details
Security Data: such as CCTV footage when you enter or are present in the Company’s premises.
Data from Online Platforms or Social Media: such as LinkedIn, Facebook, or other platforms, where you choose to connect such accounts with the Company’s services.
Data from Public Sources: such as your organization’s website, business databases, corporate data from government databases, or other lawfully publicly disclosed information.
Data from Business Partners: such as business partners or external service providers.
Data from Third Parties Related to You: such as employers, colleagues, referrers, coordinators, or persons who provide your information to the Company.
The Company does not intend to collect your sensitive personal data (Sensitive Data), such as race, religion, or health information. However, in the event that you disclose or provide sensitive personal data to the Company without being requested to do so, such as by including such information in forms, supporting documents, or communications through various channels, the Company may contact you to obtain additional consent, or may proceed to delete or anonymize the data without delay if there is no necessity for processing. In addition to obtaining consent, the Company may collect, use, or disclose your personal data under other relevant legal bases.
The Company will retain your personal data for as long as necessary, taking into account the necessity and purposes for which the Company collected and processed such data, as well as to comply with legal requirements under applicable laws.
Even after the termination of your relationship with the Company, the Company may continue to collect, use, and disclose your personal data to the extent necessary and as required by law, for legitimate interests.
For data related to contracts and/or supporting documents, the Company will retain your personal data for as long as necessary to fulfill such purposes, for a period not exceeding 10 years from the date your relationship with the Company ends or the date of the last contact. However, in accordance with relevant laws and regulations, the Company may be required to retain your personal data for a period longer than stated above.
In order to comply with applicable legal timeframes and statutes of limitations, your personal data will be retained in a format appropriate to the type of data. However, the Company may need to retain your personal data beyond the legal statute of limitations in certain cases, such as filing for benefits upon maturity with life insurance funds, or cases under ongoing legal proceedings.
The Company will delete, destroy, or anonymize your personal data in accordance with the retention periods specified above, using appropriate methods.
The Company processes your personal data based on the following legal bases under Section 24 and other relevant provisions of the Personal Data Protection Act B.E. 2562 (PDPA), for the following purposes:
Purpose | Legal Basis | Details and necessity of providing information |
Responding to requests for demos, brochures, or whitepapers | Contractual necessity / Consent | You provide data directly in order to receive the requested service |
Managing implementation projects and delivering software | Contractual necessity | Necessary to perform the contract you have entered into with the Company |
Issuing quotations, invoices, and accounting documents | Legal obligation | Required under the Accounting Act and tax legislation |
Sending B2B marketing communications and campaigns | Consent | Consent is always obtained first; you may withdraw at any time |
Developing and improving products and services | Legitimate interests | The Company has a legitimate interest in improving its services |
Identity verification, security, and fraud prevention | Legitimate interests | Necessary to protect the Company’s systems and assets |
Processing job applications | Contractual necessity / Consent | Necessary for conducting eligibility checks or interviews prior to entering into a contract / You provide consent at the time of submitting your application |
Complying with regulatory or court orders | Legal obligation | When required by applicable law or a court order |
  In addition to the purposes set out above, the Company may be required to process personal data for other purposes as authorized or required under applicable personal data protection laws or other relevant laws. In such cases, the Company will process personal data based on an appropriate legal basis and only to the extent necessary. The Company will also ensure that such processing is carried out in accordance with the principles and requirements prescribed by the applicable laws.
  In cases where the Company needs to collect your personal data to comply with legal obligations or to enter into a contract, if you refuse or do not provide the required personal data, the Company may be unable to provide services or carry out the relevant purposes, such as assessing job applications, providing or demonstrating products, participating in events, or communicating with you.
  In cases where certain information is optional, you may choose not to provide it or withdraw your consent at a later time. However, refusal to provide such information may limit your access to certain services or functionalities offered by the Company.
The Company may disclose your personal data for the purposes specified in Section 4 to the following third parties:
Partners and Subcontractors (Implementation Partner/Subcontractor): Only to the extent necessary for project delivery, bound by Non-Disclosure Agreements (NDA) and Data Processing Agreements (DPA).
The Company’s Service Providers: Acting as Data Processors, such as providers of Cloud systems, CRM, or marketing platforms, with Data Processing Agreements (DPA) executed as required by law.
Professional Advisors: Such as legal advisors, auditors, or inspectors, only where necessary, bound by professional confidentiality obligations.
Government Agencies or Courts: Where required by law or a lawful order.
Business Transfer or Merger: In the event of organizational restructuring, merger, or business transfer, the transferee will be bound by this Notice.
Where the Company discloses your data to third parties, the Company will require such parties to protect the data to standards comparable to this Notice.
The Company may need to transfer your personal data to servers or service providers in foreign countries. The Company will ensure that such transfers comply with PDPA Sections 28-29 using one of the following mechanisms:
Transfer of data to countries with adequate personal data protection standards as determined by the regulatory authority.
In cases where data is transferred to a destination country with inadequate personal data protection standards, the Company will implement appropriate personal data protection measures or rely on exceptions permitted by law, such as obtaining your consent or where necessary for the performance of a contract.
Agreements or contracts with appropriate personal data protection measures, including internationally recognized standard contractual clauses.
Under the Personal Data Protection Act (PDPA), you have the following rights to manage your personal data:
Right | Description |
Right of Access and obtain a copy | Request to access and a copy of your personal data held by the Company |
Right to Rectification | Request correction of inaccurate or incomplete data |
Right to Erasure | Request deletion or destruction of data where there is no longer a lawful basis to retain it |
Right to Restriction | Request a temporary halt to processing while another request is under consideration |
Right to Object | Object to processing based on legitimate interests or direct marketing |
Right to Data Portability | Receive your data in a machine-readable format for transfer to another controller |
Right to Withdraw Consent | Withdraw consent at any time. This will not affect the processing of data based on rights exercised prior to the withdrawal. |
Right to Lodge a Complaint | Complain to the PDPC if you believe processing is unlawful |
How to Exercise Your Rights and Procedures:
If you are dissatisfied with the Company’s handling of your request, you have the right to file a complaint with the Personal Data Protection Committee (PDPC) through the channels specified on its website at www.pdpc.or.th
The Company has established appropriate technical and organizational security measures, including:
Data Encryption during transmission (TLS/SSL) and storage.
Role-based Access Control for data access.
Access log recording and monitoring.
Regular employee training on personal data protection.
In the event of a personal data breach, the Company will notify the Office of the Personal Data Protection Committee (PDPC) within 72 hours. If there is a high risk to the rights and freedoms of data subjects, the Company will notify you without undue delay.
For users located in the European Economic Area (EEA), the Company will operate in accordance with the GDPR and related regulations. You may have additional rights as follows:
The right to lodge a complaint with the Supervisory Authority in your country.
Transfers of data outside the EEA will be conducted using internationally recognized standard contractual clauses or an Adequacy Decision for the destination country.
The Company will not use Automated Decision-Making that has a significant impact on you, unless explicit consent has been obtained or the conditions permitted by law are met.
The Company may periodically review and amend this Notice. Any updated Notice will be published on the website with the effective date specified. If there are significant changes that materially affect your rights, the Company will notify you through appropriate channels, such as email notifications or other communication channels, and will seek new consent from you (if necessary). Your continued use of the services after an updated Notice becomes effective will be deemed acknowledgment of such changes. However, the Company will not consider mere access to the website as consent to changes requiring explicit consent.
The Company shall not be held liable for any disclosure of personal data that you voluntarily share with other users in connection with your use of the website or any related services, as the case may be.
This Notice is governed by and interpreted in accordance with the laws of the Kingdom of Thailand, in particular the Personal Data Protection Act B.E. 2562 and related laws. Any dispute arising from this Notice shall be subject to the jurisdiction of competent courts in the Kingdom of Thailand.
If you have any questions regarding this Privacy Notice or wish to exercise your rights as a data subject under the law, you may contact the Data Controller or the Data Protection Officer (DPO) through the following channels:
TBN Corporation Public Company Limited
54 Bangkok Business Building, Fl. 15, Room No. 1501-1502 Sukhumvit 21 (Asoke) Road, Klong Toey Nua, Wattana Bangkok 10110
0-2258-5841
I have read and fully understood the contents of this Notice.
We use cookies to improve the performance and user experience of our website. You can find more details at Privacy Policy
