Privacy Policy
Privacy Policy The National Housing Authority recognizes the importance and obligations under the Personal Data Protection Act of 2019, emphasizing the respect for the privacy rights of customers, including natural persons acting on behalf of legal entities who are owners of personal data (hereinafter referred to as “you”). The Corporation is dedicated to protecting your personal data securely and ensuring confidence that your personal data will be protected under relevant data protection laws and other related regulations.
To this end, the National Housing Authority has prepared this Privacy Policy to inform you of the details related to the collection, use, or disclosure (collectively referred to as “processing”) of personal data, including rights as data subjects, with the following details:
1. Applicability of this Privacy Policy:
2. Personal data
means personal data concerning racial or ethnic origin, political opinions, beliefs, religious or philosophical beliefs, sexual behavior, criminal records, health data, disabilities, labor union membership, genetic data, biometric data, or any other data affecting the data subject in the same manner as specified by the Personal Data Protection Committee. The National Housing Authority shall handle sensitive data with special caution, and shall collect, use, and/or disclose sensitive personal data only with your explicit consent or when necessary and permitted by law.
Throughout this Privacy Notice, unless specifically stated otherwise, references to “Personal Data” and “Sensitive Data” concerning the above-mentioned service users shall be collectively referred to as “Personal Data.”
In cases where the National Housing Authority receives a copy of your national identification card or electronically extracts data from your national identification card for the purpose of identity verification in legal transactions and/or any transactions with the National Housing Authority, and such data includes religious information, it is considered Sensitive Data.
The National Housing Authority does not have a policy to collect sensitive personal data from you unless with your explicit consent. The National Housing Authority shall establish procedures in accordance with best practices and as permitted by law for managing such data.
3.Personal Data Collected by the National Broadcasting Corporation
Basic Personal Data
Such as salutation, first name, last name, nickname, gender, photograph, date of birth, age, nationality, national identification number, current address, registered address, email, telephone number, marital status.
Sensitive Personal Data
as race, religion, biometric data, etc.
Other Data
(a) Contact Data, such as address, telephone number, email, LINE ID, Facebook ID, Google ID, Twitter ID, and other social media account IDs, and contact information for emergency cases.
(b) Financial Data, such as bank account numbers.
(c) Communication Data with the National Broadcasting Corporation, such as recorded images or sounds during contact with the National Broadcasting Corporation.
(d) Data related to participation in various activities, such as still images or videos.
(e) Educational and training data, such as educational background and training courses attended.
(f) Employment-related data with the National Broadcasting Corporation, such as workplace name, workplace address, telephone number, email, position, and supervisor’s name.
4. Source of Personal Data
5. Purposes of Data Collection, Use, and Disclosure
Purposes of Collecting, Using, and Disclosing Customer Personal Data
The National Housing Authority collects, uses, or discloses customers’ personal data for the following purposes:
1. Purposes Requiring Consent
Purpose:
1. For advertising management
Details:
public relations, advertising campaigns, market analysis, product development, and contacting customers to provide recommendations or product offers, including managing advertising and public relations media, in which you appear as part of the National Statistical Office’s advertising and public relations media.
Legal Basis for Data Processing:
Consent Basis
2. Objectives Not Requiring Consent
1. For operational purposes, prior to entering into a contract or to fulfill contractual obligations.
To utilize sensitive personal data in the performance of contracts as prescribed by governmental agencies, such as utilizing ethnic data recorded in land transfer registration documents of the Land Office, etc.
Legal obligation basis
2. For operational purposes, prior to entering into a contract or to fulfill contractual obligations.
To sell products and/or provide services to you or fulfill any contracts to which you are a party, including managing your account, membership registration, processing post-sales services, returns, and any actions necessary to deliver products and/or services to you or as requested by you.
Contractual basis
2.3 For advertising management, public relations.
To Advertise public relations or market campaigns, product development for which you act as an influencer.
Contractual basis
For operational and customer care purposes.
To review and analyze personal data and customer data
legitimate interest basis
For operational and customer care purposes.
To develop and maintain the National Housing Authority’s online service channels to provide you with quality, efficient, and convenient services.
legitimate interest basis
For operational and customer care purposes.
To enable access to or transfer of data in your accounts, membership numbers, or various passwords provided to you by the National Housing Authority through computers and/or other electronic devices more than one. Also, to efficiently monitor, check account access, membership numbers, or various passwords provided to you, and to prevent unauthorized or improper use, as well as to improve the National Housing Authority’s service delivery for suitability and efficiency.
1. Contractual basis
2. legitimate interest basis
For operational and customer care purposes.
To create information systems for data collection, processing, and customer data integration
1. Legal obligation basis
2. legitimate interest basis
For operational and customer care purposes.
To develop and provide IT systems to process customer data from National Housing Authority websites, applications, and various social media platforms such as Facebook, Linkedin, Twitter, Youtube, Line.
1. Legal obligation basis
2. legitimate interest basis
To manage business operations efficiently
Product and/or service management (including websites and applications); fraud detection and prevention, managing customer and potential customer relationships; maintenance, preservation, and use of IT systems.
1. Legal obligation basis
2. legitimate interest basis
To manage business operations efficiently
To measure the effectiveness of the National Housing Authority’s marketing policies and assess the effectiveness of National Statistical Office advertising through various channels.
Legitimate interest basis
Management of complaints,disputes, legal cases, and risk management
To investigate and prosecute fraudulent, illegal, or disruptive behavior, or to maintain public peace
1. Contractual basis
2. Legal obligation basis
3. legitimate interest basis
Management of complaints,disputes, legal cases, and risk management
undertaking any actions to examine, investigate, prosecute, or litigate, or undertake any proceedings to enforce rights under contract and law, suspend disputes, or conflicts that may arise between the National Housing Authority and you related to the services of the National Housing Authority.
1. Contractual basis
2. Legal obligation basis
3. legitimate interest basis
In the event that the data subject does not provide personal data or provides inaccurate or outdated personal data to the National Housing Authority, it may result in the data subject being unable to transact with the National Housing Authority or may not receive the convenience or fulfillment of existing agreements with the National Housing Authority. This may lead to the data subject suffering losses or missed opportunities and may impact compliance with any laws that the data subject or the National Housing Authority must adhere to.
6. Disclosure of Your Personal Data
(2) Managers or directly responsible persons for you, who are responsible for managing or making decisions related to you or are involved in human resources processes.
7. Marketing and Privilege
7.1 Sending notifications of benefits related to various products and services of the National Housing Authority, including offering products or services such as Cross-Selling and/or Upselling.
7.2 Establishing customer relationship programs (Loyalty Program) or customer privilege programs (Privilege Program).
7.3 Sales promotion activities and marketing communications, including competitions, prize draws, events, and various competitions that you may be interested in participating in.
7.4 Donations for charitable activities and/or other non-profit activities. For the aforementioned operations, the National Housing Authority may need to disclose your personal data to employees and/or business partners of the National Housing Authority to fulfill the aforementioned purposes. If you do not wish to receive marketing and privilege information, you can inform the National Housing Authority at any time. Additionally, you can unsubscribe from marketing emails by clicking the unsubscribe link provided at the bottom of each email. The National Housing Authority will make every effort to process your request as quickly as possible.
8. Consent Withdrawal and Potential Impacts
8.1 In the event that the National Housing Authority collects, uses, or discloses your personal data based on your consent, you have the right to withdraw your consent given to the National Housing Authority at any time. The withdrawal of consent will not affect the National Housing Authority ‘s ability to collect, use, or disclose your personal data for which you have already given consent.
8.2 If you are a minor under the commercial and civil laws, before giving consent, please provide details of the legal guardian to the National Housing Authority so that the National Housing Authority can obtain consent from the legal guardian.
You may withdraw consent for the collection, use, or disclosure of all or part of your personal data as specified in this Privacy Notice by informing the National Housing Authority.
If you withdraw consent for the National Housing Authority to collect, use, or disclose your personal data, which is unrelated to marketing activities, the National Housing Authority may not be able to proceed with various processes or services, manage products or goods, or maintain relationships and/or accounts you have with the National Housing Authority. This may result in you losing benefits in using the services of the National Housing Authority, similar to the situation where you consent to the collection, use, or disclosure of personal data to the National Housing Authority.
Deleting Your Personal Data
Methods for Deleting Data:
1. Deleting Specific Data:
- Users can utilize our provided tools to directly delete specific types of data. For instance, the “delete” button can be used to remove content posted on the user’s account. Once deleted, other users will no longer be able to view this content.
2. Permanently Deleting Your User Account:
- Users can easily delete their user accounts permanently through the “delete user account” menu and confirm the deletion. Upon confirmation, we will erase all of the user’s data, including posted content, service request information such as images, status updates, service request information, etc.
However, we may be required to retain certain user data as outlined in our privacy policy (Section 9).
When a User Account is Deleted:
- Users will no longer be able to access their user accounts.
- All user data, including posted content and service request information, will be unrecoverable.
To Delete Additional Data:
- In the event that users wish to withdraw consent beyond the tools we provide, they can submit a request to delete all of their personal data (collected by the application) through the Personal Data Subject Rights Request Form.
Data Deletion Timeline:
- As a general rule, we will take no more than 90 days to delete user data after a user submits a request for us to delete their user account or content.
- Nevertheless, it may take an additional 90 days to remove user data from our backup and disaster recovery systems.
Note:
- Users can contact us to inquire further about deleting their data.
- This policy is subject to change. Please check our privacy policy regularly for the latest information.
9. Data Retention and Retention Periods:
9.1 The National Housing Authority will retain your personal data only for as long as necessary, considering the necessity and purposes for which the National Housing Authority needs to collect, use, and process it, including compliance with applicable laws.
9.2 The National Housing Authority may continue to collect, use, or disclose your personal data even if you terminate your relationship with the National Housing Authority, to the extent necessary under legal requirements for the National Housing Authority ‘s benefit, and in compliance with the law or storing it in a form that does not identify individuals directly or indirectly, such as “anonymous data” or “pseudonymous data.”
9.3 The National Housing Authority may retain your personal data for as long as necessary to achieve the purposes of processing your personal data as specified in this Privacy Notice. The National Housing Authority will retain your personal data for up to 10 years from the date you terminate your relationship or last contact with the National Housing Authority, unless
the law permits the National Housing Authority to retain the personal data for a longer period.
9.4 To align with relevant timeframes and ages, the National Housing Authority will store your personal data in an appropriate format according to the type of personal data. However, the National Housing Authority may be required to continue to retain your personal data even after the expiration of the legal retention period for the benefit of the data controller, unless such benefit is less important than the basic rights in your personal data.
9.5 The National Housing Authority will conduct reviews to delete or destroy personal data, rendering it permanently unidentifiable, or by other means to limit all personal data when it is no longer necessary or relevant, or exceeds the necessity for the purposes of data collection, or when the National Housing Authority is required to do so upon your request.
10. How does National Housing Authority safeguard your personal data?
11. Owner’s Rights
11.1 You have the following rights:
(1) Right to Withdraw Consent: You have the right to withdraw your consent at any time regarding the collection, use, and/or disclosure of your personal data by the National Housing Authority, regardless of whether you provided consent before or after the date when data protection laws came into force. You have the right to withdraw consent for as long as your personal data is with the National Housing Authority, unless there are legal limitations or contractual benefits to you.
It should be noted that withdrawing your consent may affect you in various ways, such as not receiving benefits, promotions, or new offers, not receiving improved products or services tailored to your needs, or not receiving beneficial information. Therefore, it is advisable to consider and inquire about the consequences before withdrawing consent.
(2) Right to Access Personal Data: You have the right to access your personal data and request the National Housing Authority to provide you with a copy of such personal data. This includes requesting the National Housing Authority to disclose the source of personal data held by the National Housing Authority. However, the National Housing Authority may refuse your request if providing access and copies of personal data would adversely affect the rights and freedoms of others, or if the National Housing Authority is required by law or court order to withhold the disclosure of such personal data.
(3) Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request the National Housing Authority to transmit or transfer such personal data to another data controller where such transmission is technically feasible. You also have the right to request the National Housing Authority to directly transmit or transfer your personal data to another data controller in the aforementioned format, unless it is not technically feasible to do so.
It should be noted that the personal data mentioned above must be data that you have consented to the National Housing Authority to collect, use, and/or disclose, or data that the National Housing Authority is required to collect, use, and/or disclose in order to provide you with the products and/or services of the National Housing Authority, as per your contractual agreement with the National Housing Authority, or to carry out operations as requested by you prior to using the products and/or services of the National Housing Authority, or other personal data as prescribed by the competent authority under the law.
(4) Right to Object to Data Processing: You have the right to object to the collection, use, and/or disclosure of your personal data at any time if such collection, use, and/or disclosure of your personal data is carried out for necessary operations under the lawful interests of the National Housing Authority, or of individuals or other legal entities, within the limits that you can reasonably anticipate, or for the performance of duties for the public interest. If you object, the National Housing Authority will continue to collect, use, and/or disclose your personal data only where the National Housing Authority can demonstrate, under the law, that there are compelling legitimate grounds for the processing that override your fundamental rights or freedoms, or for the establishment, exercise, or defense of legal claims, in each specific case. Additionally, you have the right to object to the collection, use, and/or disclosure of your personal data for marketing purposes or for purposes related to scientific, historical, or statistical research.
(5) Right to Request Data Erasure: You have the right to request the deletion or destruction of your personal data or to make your personal data unidentifiable if you believe that your personal data has been collected, used, and/or disclosed unlawfully or if the National Housing Authority no longer needs to retain it for the purposes relevant to this Privacy Notice, or when you have exercised your right to withdraw consent or your right to object as stated above, unless the National Housing Authority is required by law or uses the right to claim relevant law in retaining such data.
(6) Right to Suspend Data Use: You have the right to request the temporary suspension of the use of your personal data in cases where the National Housing Authority is reviewing requests to exercise your rights to amend or object to your personal data, or in other cases where the National Housing Authority no longer deems it necessary and must delete or destroy your personal data under the relevant law, but you request the National Housing Authority to suspend the use instead.
(7) Right to Amend Personal Data: You have the right to request the National Housing Authority to correct your personal data to be accurate, up-to-date, complete, and not misleading.
(8) Right to File a Complaint: You have the right to lodge a complaint with the competent authority if you believe that the collection, use, and/or disclosure of your personal data by the National Housing Authority constitutes a violation or non-compliance with the relevant law. If you have concerns or doubts about the practices of the National Housing Authority regarding your personal data, please contact the National Housing Authority using the contact details provided in Section 16 of this Privacy Notice for Customers. In cases where there are reasonable grounds to believe that the National Housing Authority has violated data protection laws, you have the right to lodge a complaint with the Expert Committee appointed by the Data Protection Committee in accordance with the regulations and procedures prescribed by data protection laws.
In cases where a data subject submits a request to exercise their rights under data protection laws, the National Housing Authority will process the request within the timeframe specified by law. Additionally, the National Housing Authority reserves the right to refuse or not act upon such requests if the law so dictates.
11.2 The National Housing Authority has the sole and discretionary right to respond to and process your requests or to deny your requests.
Your exercise of rights under Section 11.1 may be subject to limitations imposed by relevant laws, and there may be circumstances where it is necessary for the National Housing Authority to refuse or be unable to process your requests as stated above. For example, compliance with laws or court orders, for the public interest, or exercising your rights may infringe upon the rights or freedoms of other individuals. If the National Housing Authority refuses your request, the National Housing Authority will inform you of the reasons for the refusal.
12. Personal Data Security Measures
The National Housing Authority adheres to policies and guidelines concerning information security, referencing the international standard ISO/IEC 27001 for maintaining the security and confidentiality of personal data. These measures are reviewed annually, at least once per year.
The National Housing Authority prioritizes the security of personal data by implementing measures such as encryption and access restriction to ensure that both internal personnel and external parties acting on behalf of the National Housing Authority comply with appropriate data protection standards. This includes responsibilities for preventing data breaches.
Regular reviews and enhancements are conducted by the National Housing Authority to ensure that the security measures for personal data processing remain current and appropriate to the level of risk, maintaining the confidentiality, integrity, availability, and resilience of personal data processing activities. This encompasses protection, loss prevention, data collection, access, use, modification, correction, or disclosure of personal data without authorization. The National Housing Authority applies these security measures to all types of personal data processing activities, whether electronic or in document format.
13. Connecting to External Websites
When using the services of the National Housing Authority application or website, there may be links connecting to online social networks, platforms, and other websites operated by third parties. The National Housing Authority endeavors to connect only to websites that adhere to standards for protecting personal data. However, the National Housing Authority cannot be held responsible for the content or data protection standards of external websites unless otherwise specified. Any personal data provided by you to external websites will be collected and governed by the respective privacy policies of those third parties (if any). In such cases, the National Housing Authority advises you to review and adhere to the privacy policies displayed on those websites separately from those of the National Housing Authority.
14. Change to Customer Privacy Notices
The National Housing Authority regularly reviews customer privacy notices to ensure compliance with guidelines, regulations, and relevant laws. In the event of changes to the privacy notices, the National Housing Authority will notify you of the modifications and provide updated privacy notices through appropriate channels.
The National Housing Authority recommends that you periodically review changes to the privacy notices.
15. Contact Channels
Data Protection Officer (DPO) of the National Housing Authority
Data Protection Committee of the National Housing Authority
Address: 905 Nawamin Road, Klongchan, Bangkapi, Bangkok 10240
Telephone: 02-351-6619, 02-351-7191
Email: dpo@nha.co.th