PDPA – Our Practises and Your Rights

Introduction

Thailand’s Personal Data Protection Act BE 2562 (PDPA) came into effect on 1^st June 2022. This document details the collection, use, disclosure, storage and/or transfer of personal data by Clarity IT Co., Ltd. and its personnel in the normal course of business. It also details your personal data protection rights.

 

What data is collected

Clarity IT collects the following data from our clients, partners and suppliers that can be considered personal data of individuals and comes under the definition of personal data according to the PDPA:

1. Names, Email address(es), Instant Messaging ID(s) and/or phone number(s)
2. Position and function
3. Usernames and passwords (only when required to perform some IT related task when needing user level access to a device)
4. File names, folder names and folder structure
5. Company, Office address and location
6. Home address in special cases
7. IP address (in some cases)
8. Billing information

 

How do we collect your data?

Most of this data is collected from our clients, partners and suppliers whom directly provide the information to us in the normal course of business. We do not have any goal or desire to actively gather personal data.

1. General communications
2. Business engagement / proposals / approved quotations
3. Audits / Auditing software / Questionnaire and interviews
4. Email request and Forms
5. Ticketing system

 

How will we use your data?

Clarity IT collects personal data so that we can:

1. Provide IT support and maintenance services to our clients.
2. Provide delivery and/or pick-up of hardware and software items to/from our clients.
3. Provide user assistance and training to our clients.
4. Email or contact clients and partners in case of IT incidents or alerts.
5. Do billing with clients, partners, and suppliers.
6. Ongoing business-related communications.
7. Other general informational messages.

How do we store your data?

Clarity IT stores personal data in one or more locations (in order to support the normal course of business):

1. ERP, ticketing system and CRM.
2. Accounting system.
3. Email system.
4. Electronic files on our file server and/or cloud storage.
5. Data backup.

All of our systems are secured and require the use of complex passwords.

All of our internal servers are behind a secure VPN (password and secure certificate required).

Any web-based (cloud) systems requires encrypted communications and where available Multi-layer or Multi-factor authentication is implemented.

 

Marketing

Clarity IT might send promotional information to users from time to time.

 

What are your data protection rights?

Your specific consent for the data collection in not required because Clarity IT complies with applicable laws and regulations and certain information is required in order to perform a contract or a service to which you are a party.

 

Clarity IT would like to make sure you are aware of all your data protection rights, which is as follows:

The right to access – You have the right to request Our Company for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request Our Company to complete the information you believe is incomplete.

The right to erasure – You have the right to request that Our Company erase your personal data, under certain conditions. We may charge a fee for this service and there may be some limits to this.

The right to restrict processing – You have the right to request that Our Company restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to Our Company’s processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that Our Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.