Waiting for information (hereinafter referred to as the ‘Company’) produces and sells daily packaging materials for individuals and businesses.

 

The company would like to inform you that the company recognizes the importance of customer privacy. Person using the service as well as other persons involved in providing the Company’s services, it is well understood that the personal information of each user or service user is extremely important.

 

The Company would like to inform you of the Company’s personal data protection policy regarding the collection, use, or disclosure of your personal information. The company would like to clarify the details. How to store, collect, use and/or disclose data protection Data access, transfer, and analysis of your personal data are as follows:

“Personal information” means various information. In registering on the company’s website Providing information through the company’s application or other applications, messages sent to the company via the LINE program As well as providing information by sending the company’s various email messages, cookies, transaction information. and usage history

Under the Personal Data Protection Act 2019, the Company has established this personal data protection policy. The company has legal status called ‘Personal Data Controller’ The Company has designated employees assigned by the Company to have specific duties to carry out the collection, use, or disclosure of personal data in accordance with orders or on behalf of the Company. It has legal status called ‘Personal data processors’ and customers and service users as well as other persons involved in providing services are considered ‘Personal data owner’ according to the provisions of this law

Section 1. Personal information that the company collects, uses, and/or discloses.

 

The Company collects personal information which is information that enables the identification of customers. Person using the service as well as other persons involved in providing services Whether directly or indirectly, including information that you directly provide from the company’s registration. Providing information through the company’s application or other applications, messages sent to the company via LINE program as well as providing information by sending various company email messages, cookies, transaction information. and history of use through the website or any other channels including:

 

• Contact information such as residence, place of work, telephone number, email address, Line ID
• Device or tool information such as IP Address MAC Address Cookie ID
• Other information such as website usage, sound, still images, animations and any other information that is considered personal information under personal data protection laws.

Item 2. Purposes for collecting, using and/or disclosing information.

 

The company will use your information to create and improve customer websites or service users including various online platforms and other social media channels To achieve the success of the work is a website or various online platforms that can be used completely in electronic media. according to customer wishes

If later there are changes, additions, or modifications to the purposes of collecting, using, and/or disclosing information from the original notification. The company will inform you to request consent again and provide a record of additional amendments as evidence

The Company will not collect, use or disclose your personal information. for other benefits that is other than the purpose that was informed to you before or at the time of collection

 

Article 3. Protection of personal information

The company will ask for your consent first. In collecting information, using or disclosing your information by requesting your consent, the Company will do so expressly. By doing it in writing or electronically.

The company has a policy to protect personal information as follows.

3.1 The company has put in place appropriate security measures. To prevent loss, access, use, change, modification, or disclosure of personal information without authority or wrongdoing. The Company will review such measures when necessary or as technology changes in order to provide effective treatment. Appropriate security, in accordance with the minimum standards set by law.

3.2 In the case where personal data must be provided to a person or juristic person other than the personal data controller. The Company will take steps to prevent that person from using or disclosing personal information without authority or wrongfully.

3.3 The Company has established a verification system to delete or destroy personal information after the expiration of the deadline. Storage period or that is not relevant or beyond necessity for the purpose of collecting that personal information. or as requested by the owner of personal data or the owner of personal information Withdrew consent unless kept for the purpose of exercising freedom of expression Retention for the purpose of Personal Data Protection Act according to Section 24 (1) or (4) or section 26 (5) (a) or (b) use for the establishment of legal claims. Complying with or exercising legal claims or raising legal claims to fight or for compliance with the law. In this regard, the provisions of Section 33, paragraph five, shall apply mutatis mutandis to the deletion or destruction of personal information.

3.4 The Company will report the incident of personal data breach to the Office of the Personal Data Protection Commission without delay within seventy-two hours. From knowing the cause as far as possible unless such violation has no risk of having an impact on Individual rights and freedoms in cases where the violation has a high risk of affecting the rights and freedoms of individuals, the Company will notify the owner of the personal data of the violation along with remedies without delay. In this regard, such notification and exceptions shall be According to the criteria and methods announced by the Personal Data Protection Board.

The Company does not specify conditions for giving consent to collect, use, or disclose personal information that is not necessary or relevant for entering into a contract or accessing services. And you can withdraw your consent at any time. However, withdrawing consent does not affect the collection, use, or disclosure of personal information for which you have duly consented.

In the case where the owner of personal data is a minor who has not yet attained legal age by marriage. or does not have the same status as a person who has reached the age of majority according to Section 27 of the Civil and Commercial Code. The Company will proceed to request consent from the owner of such personal data as follows.

• In the case where the consent of the minor is not any matter to which the minor may give consent. alone as provided in Section 22, Section 23 or Section 24 of the Civil and Commercial Code, the company must first obtain consent from the person with parental authority who has the authority to act on behalf of the minor.

 

• In the case where the minor is not more than ten years of age The Company will request consent from the authorized user of parental authority. Acting on behalf of a minor In the case where the owner of personal data is an incapacitated person Requesting consent from the owner of such personal data The company will request consent from the guardian who has authority to act on behalf of the incapacitated person. In the case where the owner of personal data is a quasi-incompetent person Requesting consent from the owner of such personal data The company will request consent from the guardian who has the authority to act on behalf of the quasi-incapacitated person.

 

The Company will ensure that your information is accurate, current, complete and not misleading.

 

Section 4. Exceptions to the collection, use, or disclosure of personal information.

4.1.The company will not collect personal information. without your consent, except

4.1.1 To achieve the objectives related to the preparation of historical documents or archives. for public benefit or concerning research studies or statistics for which appropriate protection measures have been put in place. To protect the rights and freedoms of the owners of personal data as specified by law.

4.1.2 To prevent or stop danger to a person’s life, body, or health.

4.1.3 It is necessary for the performance of a contract to which the owner of personal data is a party or To be used to carry out the request of the owner of personal data before entering into the contract.

4.1.4 It is necessary for the performance of duties in carrying out missions in the public interest of the controller. Personal information or performing duties in the exercise of state power granted to the Personal Data Controller

4.1.5 It is necessary for the legitimate interests of the Personal Data Controller. or of persons or legal entities other than the data controller. unless such benefit is less important than the basic right to personal data of the personal data owner.

4.1.6 It is the personal data controller’s compliance with the law.

4.2 The Company will not collect personal information regarding race, ethnicity, political opinions, religious b