Consent Form
Privacy Policy and Consent Form for Collection, Use, and Disclosure of Personal Information
Privacy Policy for Customers
The Institute for Population and Social Research (IPSR) of Mahidol University values the protection of your personal information. This Privacy Policy describes practices regarding the collection, use, or disclosure of personal information, including the rights of the owner of the personal data according to the Personal Data Protection Act
Collection of personal information
We will collect personal information obtained directly from you through the following channels:
• Subscription
• Email
Types of personal data collected
• Personal information, such as name, surname, age, date of birth, nationality, identification number, passport number, etc.
• Contact information, such as an address, telephone number, email, etc.
• Account information, such as user accounts, usage history, etc.
• Technical information, such as IP address, Cookie ID, activity log, etc.
• Other information, such as pictures, animations, and any other information considered personal data per the Personal Data Protection Act.
Minors
If you are under 20 years of age or have legal limitations, we may collect, use, or disclose your personal information; however, we need your parent or guardian’s consent or whatever the law allows. If we become aware that personal information has been collected from a minor without the consent of their parents or guardians, we will delete that information from our servers.
Methods for retaining personal information
We will retain your personal data in hardcopy and electronic form
We will keep your personal information as follows:
• On our company/institute server in Thailand.
Processing of personal data
We will collect, use, or disclose your personal information for the following purposes:
- Personal data processing
- To create and manage user accounts
- To improve products, services, or user experience
- To use for internal management of the company
- To use for marketing and promotion purposes
- To collect feedback
- To comply with the Terms and Conditions
- To comply with laws and regulations of government agencies
Disclosing personal data
We may disclose your personal information to others under your consent or as permitted by law, as follows:
Internal management
We may disclose your personal information within the company to the extent necessary to improve and develop our products or services. We may collect internal information for products or services under this policy for the greater benefit of you and others.
Storage period of personal data
We will retain your personal data for the necessary periods during which you are a customer or have a relationship with us or for the period required to achieve the objectives in connection with this policy. That data may need to be preserved afterward. Where required by law, we will delete, destroy, or otherwise anonymize your personally identifiable information when it is no longer necessary or at the end of the said period.
Rights of the personal data owner
Under the Personal Data Protection Act, you have the right to the following:
Right to withdraw consent: If you have given your consent, we will collect, use, or disclose your personal information. Either the consent you provided before the date on which the Personal Data Protection Act comes into force, or you have the right to withdraw your consent at any time.
Right to access: You have the right to request access to your personal data that is under our responsibility and to ask us to make a copy for you. You can ask us to disclose how we obtained your personal information.
Right to data portability: You have the right to obtain your personal data in the event that we provide it in a format that is readable or usable by means of a working device or other automatic devices and can use or disclose personal information by automated means including the right to request that we transmit or transfer personal data in such form to another personal data controller when possible by automated means, and have the right to request personal data that we transmit or transfer personal data in such form to other personal data controllers directly unless it cannot be operated due to technical reasons.
Right to object: You have the right to object to the collection, use, or disclosure of your personal data at any time if the collection, use, or disclosure of your personal data is made to carry out the necessary activities within/under our legitimate interests or of another person or entity, to the extent that you can reasonably expect or to perform a task in the public interest.
Right to erasure/destruction: You have the right to request the erasure/destruction of your personal data or to make personal data available to you. If you believe that your personal data has been unlawfully collected, used, or disclosed in accordance with applicable law or deem that we no longer need to maintain it for the purposes involved in this policy, you may exercise your right to withdraw your consent or exercise the right to object as stated above.
Right to restriction of processing: You have the right to request a temporary suspension of the use of your personal data in the event that we are investigating your right to rectification of personal data or objections to it. Otherwise, we are obliged to delete or destroy your personal data in accordance with applicable law, but you can request that we suspend its use instead.
Right to rectification: You have the right to request that your personal data be correct, current, complete, and not misleading.
Right to lodge a complaint: You have the right to lodge a complaint with the relevant legal authority. If you believe the collection, use, or disclosure of your personal information is in violation of the Act or fails to comply with the relevant laws, you can exercise your rights as the above personal data subject by contacting our Personal Data Protection Officer as detailed at the end of this policy. We will notify you of the results within 30 days from the date we receive your request to exercise your rights. If we decline a request, we will inform you of the reason for the refusal via various channels such as text message (SMS), email, telephone, mail, etc.
Advertising and marketing
We may send information or newsletters to your email. Its purpose is to offer you something that is of interest to you. If you no longer wish to receive communications from us via email, you can either click “unsubscribe” in the email link or reach out to our email.
Personal tracking technology (Cookies)
To make your user experience more complete and efficient, we use cookies or similar technologies to improve access to products, services, or suitable advertisements and track your usage. We use cookies to identify and track users of our website and access to our website. If you do not want cookies on your computer, you can set your browser to refuse cookies before using our website.
Maintaining the security of personal data
We will maintain the security of your personal data in accordance with the principles of confidentiality, accuracy, completeness (integrity), and condition for use (availability) in order to prevent loss, access, use, change, alteration, or disclosure. We will also provide measures to maintain the security of personal data, which covers administrative protection measures, administrative safeguards, technical safeguards, and physical safeguards regarding access control.
Notification of personal data breach
In the event of a breach of your personal data, we will notify the Office of the Personal Data Protection Commission without delay within 72 hours from the time we are aware of the cause. Where the infringement has a high risk of affecting your rights and freedoms, we will notify you of violations with remedies without delay through various channels such as website, text message (SMS), email, phone call, letter, etc.
Amendments to the Privacy Policy
We may revise this policy from time to time. You can find the revised terms and conditions of this policy on our website.
This policy was last revised and effective as of September 30, 2021.
Privacy Policy of Other Sites
This Privacy Policy applies only to the provision of products, services, and use of the Website for our customers. If you visit another website, even through our website, the protection of personal information is subject to the privacy policy of that website and which we are not affiliated.
Contact details
If you would like to inquire about this Privacy Policy, including requesting to exercise your rights, you can contact our Data Protection Officer or us as follows:
Personal Data Controller
Institute for Population and Social Research
Mahidol University, Salaya Campus
999 Phutthamonthon 4 Road
Phutthamonthon, Nakhon Pathom 73170
Thailand
Email: prwww@nahidol.ac.th
Website: https://ipsr.mahidol.ac.th/
Telephone: +66 (0) 2-441-0201–4 or +66 (0) 2-441-9666
