We, PBISS International School, operate the https://www.pbiss.ac.th website to promote and provide our services (the “Service”).
This page is used to inform website visitors regarding our Privacy Policy in relation to the collection, use and disclosure of personal data (“Personal Data”) of individual in accordance with the Personal Data Protection Act B.E. 2562 (“PDPA”), relevant laws and regulations.
If you choose to use our Service, then you agree to the collection, use and disclosure of Personal Data in relation with this Privacy Policy. The Personal Data that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.
The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at https://www.pbiss.ac.th, unless otherwise defined in this Privacy Policy.
For a better experience while using our Service, we may collect and use your Personal Data, including but not limited to your full name, phone number, and postal address. The Personal Data that we collect will be used for the purpose of the Service and contacting or identifying you.
We would like to inform you that whenever you visit our Service, we will collect information that your browser sends to us that is called “Log Data”. This Log Data may include information such as your computer’s Internet Protocol ("IP") address, browser version, pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
Cookies are files with a small amount of data that is commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive.
Our website uses these "cookies" to collect information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service.
For more general information on cookies, please read the "Cookies" article from thePrivacy Policy Generator.
We may disclose collected Personal Data with third party service providers that we have appointed or hired to process the Personal Data on our behalf or in our name for the following purposes:
The third party service providers shall have limited access to your Personal Data solely to perform the tasks assigned to them on our behalf or in our name. In addition, these third party service providers are obligated not to disclose or use any of the Personal Data for any other unauthorized purposes.
We value your trust in providing us your Personal Data, thus we are striving to use commercially acceptable security measures to prevent and protect any unauthorized or unlawful loss, access, use, alteration, modification, or disclosure of Personal Data. These security measures are reviewed when it is necessary, or when the technology has changed from time to time in order to efficiently maintain the appropriate security and safety.
Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the privacy policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Our Service requires a consent from a parent or guardian of a minor to collect, use and disclose Personal Data of the minor, except where we can rely on other lawful grounds to process the minor’s Personal Data, and does not address Personal Data of a child who is under the age of 13. In the case we discover that a child under the age of 13 has provided us with their Personal Data, we shall immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with his/her Personal Data, please contact us so that we will be able to do necessary actions to ensure the safety and removal of such Personal Data.
This Data Protection Notice (“Notice”) sets out the basis which PBISS International School (“we”, “us”, or “our”) may collect, use, disclose or otherwise process personal data (“Personal Data”) of our customers in accordance with the Personal Data Protection Act B.E. 2562 (“PDPA”), relevant laws and regulations. This Notice applies to Personal Data in our possession or under our control, including Personal Data in the possession of organisations which we have engaged to collect, use, disclose or process Personal Data for our purposes.
1. As used in this Notice, “customer” means an individual who (a) has contacted us through any means to find out more about any goods or services we provide, or (b) may, or has, entered into a contract with us for the supply of any goods or services by us; and “Personal Data” means, any information relating to a person who is a customer and can be directly or indirectly identified such customer
(a) from that data alone; or
(b) from that data and other information to which we have or are likely to have access.
2. Depending on the nature of your interaction with us, some examples of Personal Data which we may collect from you include but not limited to title, name, age, nationality, gender, date of birth, marital status, identification information such as your ID or Passport number photographs, contact information such as your address, email address or telephone number, other personal information such as audio-visual information, employment information, education background, health and medical records and financial information such as credit card numbers, debit card numbers or bank account information.
3. Other terms used in this Notice shall have the meanings given to them in the PDPA (where the context so permits).
4. We generally do not collect your Personal Data unless (a) it is provided to us voluntarily by you directly based on the legitimate grounds of legal obligation, performance of contract made between you with us, our legitimate interests, performance under your consent and other lawful basis, or via a third party who has been duly authorised by you to disclose your Personal Data to us (“Authorised Representative”) after (i) you (or your Authorised Representative) have been notified of the purposes for which the Personal Data is collected, and (ii) you (or your Authorised Representative) have provided written consent to the collection and usage of your Personal Data for those purposes, or (b) collection and use of Personal Data without consent is permitted or required by the PDPA or other laws. We shall seek your consent before collecting any additional Personal Data and before using your Personal Data for a purpose which has not been notified to you (except where permitted or authorised by law).
5. We may collect and use your Personal Data for any or all of the following purposes:
(a) performing obligations in the course of or in connection with our provision of the goods and/or services requested by you;
(b) verifying your identity;
(c) responding to, handling, and processing queries, requests, applications, complaints, and feedback from you;
(d) managing your relationship with us;
(e) processing payment or credit transactions;
(f) sending your marketing information about our goods or services including notifying you of our marketing events, initiatives and promotions and other promotions;
(g) complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
(h) any other purposes for which you have provided the information;
(i) transmitting to any unaffiliated third parties including our third party service providers and agents, and relevant governmental and/or regulatory authorities, whether in Thailand or abroad, for the aforementioned purposes; and
(j) any other incidental business purposes related to or in connection with the above.
6. We may disclose your personal data:
(a) where such disclosure is required for performing obligations in the course of or in connection with our provision of the goods or services requested by you; or
(b) to third party service providers, agents and other organisations we have engaged to perform any of the functions listed in Clause 5 above for us.
7. The purposes listed in the above clauses may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under any contract with you).
8. The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing. You may withdraw consent and request us to stop using and/or disclosing your personal data for any or all of the purposes listed above by submitting your request in writing or via email to our Data Protection Officer at the contact details provided below.
9. Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within ten (10) business days of receiving it.
10. Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our goods or services to you and we shall, in such circumstances, notify you before completing the processing of your request.
11. Should you decide to cancel your withdrawal of consent, please inform us in writing in the manner described in Clause 8 above. Please note that withdrawing consent does not affect our right to continue to collect, use and disclose Personal Data where such collection, use and disclosure without consent is permitted or required under applicable laws.
12. If you wish to make (a) an access request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or (b) a correction request to correct or update any of your personal data which we hold about you, you may submit your request in writing or via email to our Data Protection Officer at the contact details provided below.
13. Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request.
14. We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the PDPA).
15. To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures such as up-to-date antivirus protection, encryption and the use of privacy filters to secure all storage and transmission of personal data by us, and disclosing personal data both internally and to our authorised third party service providers and agents only on a need-to-know basis.
16. You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.
You can exercise your rights as a data subject under the PDPA as following details
17.1 Right to access personal data: You have the right to access, obtain copies and request to disclose the source of your Personal Data retained on our service or by us. However, we are entitled to deny your request under the law or court orders or when such request may adversely impact the rights and freedoms of others.
17.2 Right to correct personal data: You have the right to request for the correction of your Personal Data to be accurate, complete, and up-to-date. If you find that your Personal Data is incorrect, incomplete, or not up-to-date, please kindly contact our Data Protection Officer in writing or via email at the contact details provided below.
17.3 Right to delete or destroy personal data: You have the right to request us to delete, destroy or anonymise your Personal Data. However, the use of this right to delete or destroy must be complied with the conditions specified by law.
17.4 Right to suspend the use of personal data: You have the right to request the suspension of the use of your Personal Data under certain circumstances prescribed by the PDPA as following:
(a) During the period when we are conducting an examination as requested by you to correct such Personal Data to be accurate, complete, and up-to-date.
(b) For cases related to Personal Data which we have initially been asked to erase or destroy but was followed by an additional request of processing restriction instead.
(c) When your Personal Data is no longer necessary to retain for the original purposes, compliance, exercise or defense of legal claims.
(d) During the period when we are proving lawful grounds for the data processing in order to reject your objection.
17.5 Right to object to Personal Data processing: You have the right to object to the processing of your Personal Data in case we proceed with legitimate interests basis or for the purpose of direct marketing unless we can demonstrate that the data processing is for legitimate grounds or for the establishment of legal claims, the exercise or defense of legal rights.
17.6 Right to withdraw consent: You have the right to withdraw your consent that has been given to us at any time during the period that your Personal Data is retained by us unless there are legal restrictions in withdrawal or by the contractual agreement between you and us that provides a benefit to you.
17.7 Right to receive, transmit, or transfer Personal Data: You have the right to request your Personal Data from us in a format that can be easily read or used by general-purpose tools or devices that work automatically and can be used to access or disclose Personal Data automatically. You may also request us to send or transfer the data in such a format to another data controller. The use of this right must comply with the conditions specified by law.
17.8 Right to file a complaint: You have the right to make a complaint with the Personal Data Protection Committee or their office in the event that our data processing violates or is not complied with the PDPA.
18. We may retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws.
19. We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected, and is no longer necessary for legal or business purposes.
20. We generally do not transfer your personal data to countries outside of Thailand. However, if we do so, we will obtain your consent for the transfer to be made and we will take steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the PDPA.
21. You may contact us and our Data Protection Officer if you have any enquiries or feedback on our personal data protection policies and procedures, or if you wish to make any data related request, send an email with related data in the email subject to the following address:
PBISS International School
Address: 6/5 Moo 3, Bo Phut, Koh Samui, Surat Thani, 84320 Thailand
Contact our Data Protection Officer via email to: info@pbiss.ac.th
22. This Notice applies in conjunction with any other notices, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your personal data by us.
23. We may revise this Notice from time to time without any prior notice. You may determine if any such revision has taken place by referring to the date on which this Notice was last updated. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.
Your continued use of our services constitutes your acknowledgement and acceptance of such changes.
Effective date : [XX/XX/2024]
Last updated : [XX/XX/2024]
I acknowledge that I have read and understood the above Data Protection Notice, and consent to the collection, use and disclosure of my Personal Data by PBISS International School for the purposes set out in this Notice.
© Международная школа PBISS, 2022. Все права защищены. | Политика конфиденциальности
