Personal Data Protection Policy

Personal Data Protection Policy (PDPA) Announcement

This policy is prepared to inform you as a service user (hereinafter referred to as the "User") of the practices in collecting, using and disclosing your personal data by Mieosan Services Co., Ltd. (hereinafter referred to as the "Company"), which operates document preparation services and visa application consulting services both in Thailand and abroad, foreign worker document services, document translation services, document certification services, and aircraft sales services.

The Company recognizes the importance of protecting your personal data, and is committed to strictly complying with the Personal Data Protection Act B.E. 2562 ("PDPA") and related laws, ensuring that your personal data is managed transparently, securely, and in accordance with the specified purposes.

1. Definitions

Personal data: means information about an individual that enables the identification of that individual directly or indirectly, but does not specifically include information about the deceased.
Sensitive personal data: means personal data as prescribed by law, including race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal history, health information, disabilities, trade union information, genetic information, biometric information, or any other information that may affect the data owner in a similar manner as announced by the Personal Data Protection Committee.
Personal data controller: means a person or legal entity who has the authority to decide on the collection, use, or disclosure of personal data.
Personal Data Processor: means an individual or legal entity that performs the collection, use or disclosure of personal data as ordered or on behalf of the personal data controller.

2. Personal Data We Collect

In order to provide the Company's services, it is necessary to collect your personal data, including but not limited to:

Identification Data: First and last name, date of birth, gender, nationality, marital status, photograph, copy of ID card, copy of passport and/or copy of all types of personal documents
Contact Data: Address, telephone number, email including password (only if necessary and with your consent), location coordinates
Financial Data: Bank account information, bank statement, proof of income, tax information (as specified by the embassy)
Travel History: Information on entering and leaving the country, visa application history, visas received
Employment/Education History: Work history, position, educational institution, educational qualifications
Sensitive Personal Data: (only if necessary and with your consent) such as health information (in cases where it is required to submit to apply for certain types of visas)
Other Data: Any data that you provide to the Company in using the Services or information necessary for a visa application, according to the embassy's requirements

3. Sources of personal data

The Company will collect your personal data from the following sources:

From you directly: When you provide information to the Company through various channels, such as filling out forms, communicating via telephone/email/online channels, submitting documents
From agents/authorized persons: In the event that you use the service through an agent or a person authorized by you to act on your behalf

4. Purposes of collecting, using and disclosing personal data

The Company will collect, use and disclose your personal data for the following purposes:

For service purposes: To prepare documents, fill out visa application forms, submit documents to embassies/consulates or related agencies, and perform other actions necessary to provide you with complete visa application document preparation services
For communication: To inquire for additional information, report progress, answer questions or provide advice on visa applications
For identity verification: To verify your identity in conducting transactions or using services
For compliance with the law: To comply with laws, regulations, requirements of government agencies, embassies or court orders
For legitimate interests: Such as for managing relationships with users, improving and developing service quality, preventing fraud or maintaining data security
For other purposes for which you have given your consent: In the event that the Company needs to use your personal data for purposes other than those mentioned above, the Company will inform you and seek your consent in advance.

5. Processing of Sensitive Personal Data

In the event that it is necessary to process sensitive personal data, such as health data, for certain visa application purposes, the Company will only do so if:

We have received your explicit consent.
It is subject to exceptions provided by law, such as for the purposes of compliance with the law, for public health purposes, or for the establishment of legal claims.

6. Disclosure of Personal Data

The Company may disclose your personal data to the following persons or agencies:

Embassy/Consulate: which is the primary agency for visa consideration

Other relevant government agencies: such as the Department of Labor, Ministry of Foreign Affairs, Immigration Bureau

External service providers: such as information technology service providers, data storage service providers, legal consultants, document delivery service providers (if necessary), where the Company will provide appropriate measures to protect your personal data
Business partners: where necessary for the provision of services
Other persons with your consent: or other persons permitted by law to disclose

7. Transfer of personal data abroad

In some cases, your personal data may be transferred or stored in countries outside of Thailand, such as in cases where embassies/consulates are located outside of Thailand or cloud server providers are located abroad. In such cases, the Company will take steps to ensure that the destination country has adequate personal data protection standards or that the Company has provided appropriate protection measures as required by law

8. Duration of retention of personal data

The Company will retain your personal data for as long as necessary for the purposes specified in this policy or for the period prescribed by law or for the statute of limitations for legal claims

After the said period has elapsed, the Company will delete, destroy or anonymize your personal data.

9. Personal Data Security Measures

The Company recognizes the importance of protecting your personal data and has implemented appropriate security measures that comply with technical standards and legal requirements to prevent unauthorized access, use, disclosure, modification or destruction of data, including:

Restricting access to personal data to only personnel who need to use the data for the purpose of providing services

Using encryption technology for sensitive data
Establishing an audit trail system
Training personnel to have knowledge and understanding of personal data protection practices
Regularly reviewing and reviewing security measures

10. Rights of personal data owners

As a personal data owner, you have the following rights under the personal data protection law:

Right of Access: The right to request access and a copy of your personal data
Right to Rectification: The right to request correction of inaccurate or incomplete personal data
Right to Erasure/Right to be Forgotten: The right to request the deletion or destruction of your personal data, except where required by law
Right to Restriction of Processing: The right to request the restriction of the processing of your personal data
Right to Data Portability: The right to request that your personal data be automatically readable or operable, and the right to have such data transmitted or transferred to another data controller.
Right to Object: The right to object to the processing of your personal data.
Right to Withdraw Consent: The right to withdraw your consent to the processing of your personal data at any time, provided that the withdrawal of consent does not affect the processing of your personal data that has already been carried out lawfully.
Right to Lodge a Complaint: The right to lodge a complaint with the Personal Data Protection Committee in the event that the Company or the data processor does not comply with the law.

If you wish to exercise the above rights, please contact the Company through the channels specified in Section 12. The Company will consider and notify you of the results of the consideration within the period specified by law.

11. Amendments to the Privacy Policy

The Company may amend or update this Privacy Policy from time to time to comply with changes in the law, operations or best practices. The Company will notify you of any significant changes through appropriate channels, such as posting on the Company’s website.

12. Contact Channels

If you have any questions, concerns or wish to exercise your rights regarding your personal data, please Contact Us at:

Mieosan Services Co., Ltd.

Address: 170/46 Sri Trang Road, Krabi Yai Subdistrict, Mueang Krabi District, Krabi Province 81000

Tel: 065-6696965 or 094-9715599

Email: sup.continect@gmail.com

Website: https://www.thecontinect.com/