ChangeFusion Institute under the Thailand Rural Reconstruction Movement Foundation under Royal Patronage places importance on protecting your personal data. This Privacy Policy explains our practices on the collection, use or disclosure of personal data, including the rights of data subjects under the Personal Data Protection Act.
Collection of personal data
We will collect personal data that we receive directly from you through the following channels:
- Website sign-up
- Information that the data subject voluntarily provides on the website, such as through surveys or comments
- Data collected from use of the website through the data subject's browser cookies
We may also collect your personal data that we can access from other sources, such as search engines, social media, government agencies and other third parties.
Types of personal data collected
- Personal data, such as name, surname, gender, age, etc.
- Contact data, such as address, phone number, email, affiliated organisation, etc.
- Account data, such as user account and usage history, etc.
- Technical data, such as IP address, Cookie ID, website usage history (activity log), etc.
- Other data, such as photographs, video footage and any other data considered personal data under the Personal Data Protection Act.
Minors
If you are under 20 years of age or have restricted legal capacity, we may collect, use or disclose your personal data. We may need consent from your parents or guardians, or we may act as otherwise permitted by law. If we learn that personal data has been collected from a minor without consent from a parent or guardian, we will delete that data from our servers.
How personal data is stored
We will store your personal data in electronic form.
Processing of personal data
We will collect, use or disclose your personal data for the following purposes:
- To create and manage user accounts
- To improve services or user experience
- For organisational management
- To comply with the conditions of project funders under contractual obligations
- For research that benefits the public and is not for profit
- To comply with the terms and conditions
- To comply with the laws and regulations of government agencies
Disclosure of personal data
Normally, the Institute will not disclose personal data, unless the disclosure is for the purposes that the data subject has given to the Institute, such as disclosure to carry out a service the data subject has requested, or to meet contractual obligations, or as required by law.
Transfer of personal data overseas
We may disclose or transfer your personal data to persons, organisations or servers located overseas, solely for the purpose of providing system services. We will take various measures to ensure that the transfer of your personal data to the destination country provides adequate personal data protection standards, or in other cases as required by law.
Retention period of personal data
We will retain your personal data for as long as necessary while you are a user of the system or have a relationship with us, or for as long as necessary to achieve the purposes related to this policy. We may need to keep it for longer after that where required by law. When it is no longer necessary, or when the period ends, we will delete, destroy or de-identify your personal data so that it can no longer identify you.
Rights of data subjects
Under the Personal Data Protection Act, you have the following rights:
The right to withdraw consent: If you have given consent, we will collect, use or disclose your personal data only as consented to, whether that consent was given before or after the Personal Data Protection Act came into force. You have the right to withdraw your consent at any time.
The right to access: You have the right to request access to your personal data that is under our responsibility and to ask us to provide you with a copy of that data. You may also ask us to disclose how we obtained your personal data.
The right to data portability: You have the right to receive your personal data where we have prepared it in a format that can be read or used by automated tools or devices and that can be used or disclosed by automated means. You also have the right to ask us to send or transfer that personal data in such a format to another data controller where this is technically feasible, and the right to receive that personal data directly from us in such a format, unless this is not possible for technical reasons.
The right to object: You have the right to object at any time to the collection, use or disclosure of your personal data where it is carried out for the necessary operations under the legitimate interests of us or of another person or legal entity, provided it does not go beyond what you could reasonably expect, or to perform a task carried out in the public interest.
The right to request erasure or destruction of data: You have the right to request that we erase or destroy your personal data, or de-identify it so that it can no longer identify you. This applies if you believe your personal data has been collected, used or disclosed unlawfully under the relevant law, if you consider that we no longer need to retain it for the purposes stated in this policy, or after you have exercised your right to withdraw consent or your right to object as stated above.
The right to request restriction of processing: You have the right to ask us to restrict the use of your personal data temporarily where we are reviewing a request from you to rectify your personal data or to object, or in any other case where we no longer need the data and would otherwise have to erase or destroy it under the relevant law, but you ask us to restrict its use instead.
The right to rectification: You have the right to ask us to correct your personal data so that it is accurate, up to date, complete and not misleading.
The right to lodge a complaint: You have the right to complain to the competent authority under the relevant law if you believe that the collection, use or disclosure of your personal data violates or does not comply with the relevant law.
You may exercise your rights as a data subject described above by contacting our Data Protection Officer using the details at the end of this policy. We will notify you of the outcome within 30 days from the day we receive your request. If we refuse a request, we will tell you the reasons for the refusal through channels such as text message (SMS), email, telephone, letter, etc.
Advertising and marketing
For your benefit in receiving our services, we may send information or newsletters to your email, with the aim of offering you things that may interest you. If you no longer wish to receive communications from us by email, you may click "Unsubscribe" in the email link or contact our email address.
Tracking technologies (Cookies)
To make your use of our services more complete and efficient, we may use cookies or similar technologies to enhance your experience of our services. If you do not want cookies stored on your computer, you can set your browser to refuse cookies before using our website.
Security of personal data
We will keep your personal data secure in accordance with the principles of confidentiality, integrity and availability, in order to prevent loss, access, use, alteration, modification or disclosure. We will also put in place security measures for personal data, including administrative safeguards, technical safeguards and physical safeguards, covering access control or control of the use of personal data.
Changes to the Privacy Policy
We may amend this policy from time to time. You can view the terms and conditions of the amended policy on our website.
This policy was last amended and took effect on 1 June 2022.
Privacy policies of other websites
This Privacy Policy applies only to the offering of services and the use of our website by our users. If you visit other websites, even through our website, the protection of personal data on those websites will be governed by their own privacy policies, for which we are not responsible.
Contact details
If you wish to ask about this Privacy Policy, including exercising your rights, you may contact us or our Data Protection Officer as follows:
Data Controller
ChangeFusion Institute under the Thailand Rural Reconstruction Movement Foundation under Royal Patronage
2044/21 Baan Jitarsa, Floor 4, New Petchaburi Road, Bang Kapi Subdistrict, Huai Khwang District, Bangkok 10320, Thailand
Tel +662 716 6263 Fax +662 716 7346
Email info@changefusion.org
Website https://changefusion.org
Data Protection Officer
Mr Chitpong Kittinaradorn
2044/21 Baan Jitarsa, Floor 4, New Petchaburi Road, Bang Kapi Subdistrict, Huai Khwang District, Bangkok 10320, Thailand