Last revised: 12 July 2022
Introduction
This Event Privacy Statement describes how Deloitte Touche Tohmatsu Co., Ltd. and its affiliated companies in Thailand (collectively referred to as “we”, “us”, or “our”) collect, use, store, disclose or transfer (collectively referred to as “Process” or “Processing”) your personal data in relation to your registration and attendance of our events, exhibitions, tradeshows and/or other related activities (collectively referred to as “Event”) in accordance with the Thailand’s Personal Data Protection Act B.E. 2562 (A.D. 2019) (“PDPA”).
This Event Privacy Statement applies to your personal data we receive prior to or from the Event, including personal data in the possession of organizations who are not our affiliates which we have engaged to Process the personal data for our purposes stated in the Event Privacy Statement.
By attending the Event, you acknowledge the use of your personal data as described in this Event Privacy Statement.
This Event Privacy Statement may be supplemented or amended from time to time by other privacy statements that are specific to each Event.
If you have any questions regarding this Event Privacy Statement, please contact us.
Personal data collection
We will collect your personal data only if it is necessary and we have proper reasons to Process your Personal Data. Such data may consist of, but not limited to, the following data:
We may also store and maintain any personal data that you provide, including but not limited to, on any blogs, forums, wikis and other social media platforms.
We do not usually seek to Process any sensitive personal data (e.g., data relating to race or ethnic, religion, beliefs, political opinion, criminal record, physical or mental health, sexual orientation, etc.) from you. We will, where necessary, obtain your explicit consent to collect such sensitive personal data.
If you are required to provide us with any personal data relating to third parties, you agree to notify such third parties that we may Process their personal data and of the terms of this Event Privacy Statement as well as obtaining their consents in accordance with the PDPA and form designated by us (if necessary).
Collection method
Generally, we may Process your personal data you voluntarily provide in the course of or in connection with your attendance of the Event by various methods, including but not limited to, the following methods:
Personal data usage
We will use your Personal Data only if it is necessary and we have proper reasons to Process the Personal Data, and we may Process your personal data for the following purposes:
We may Process your personal data to fulfill the above purposes based on the following legal bases:
If consent is required for the Processing of personal data, we will specifically request it from you and your choice not to give us consent will not affect your request to join our Event.
If you fail to provide the personal data we request, we may not be able to provide our services to you (for example, to allow you to participate our Event).
In addition, we shall notify and seek your consent (if necessary) before Processing the personal data for a purpose which has not been notified to you (except where permitted or authorized by law).
Personal data disclosure
We will share your personal data only if it is necessary and we have proper reasons to Process the personal data, and we may need to share your personal data for the purposes mentioned in this Event Privacy Statement with others, including but not limited to:
In addition, we may transfer certain personal data to other countries. When we transfer your personal data to overseas, we will ensure that those countries have an appropriate level of personal data protection and the transfers are lawful.
Personal data retention
We will retain your personal data for as long as such personal data is reasonably required to fulfil the Processing purposes specified in this Event Privacy Statement and as required by applicable laws. We will delete, destroy or anonymize the personal data Processed once its retention is no longer serve the purposes mentioned in this Event Privacy Statement, or until you request us to delete it and we are able to do so.
Your rights
Under PDPA, you have the right to access and/or obtain a copy of, correct, request for erasure and/or transfer of, and object or restrict the Processing of your personal data. If we rely on your consent for the Processing of the personal data collected, you may withdraw your consent at any time. You also have the right to lodge a complaint to related government entities under the PDPA.
Security measure
We have in place reasonable commercial standards of technology and operational security to protect all personal data provided by you via this Event from unauthorized access, disclosure, alteration, or destruction of personal data, in compliance with the PDPA.
Changes to our Event Privacy Statement
We may modify or amend this Event Privacy Statement from time to time at our discretion. When we make changes to this Event Privacy Statement, we will amend the revision date at the top of this page, and such modified or amended Event Privacy Statement shall be effective as to you and your personal data as of that revision date. We encourage you to periodically review this Event Privacy Statement to be informed about how we are Processing and protecting your personal data.
Children's privacy protection
We understand the importance of protecting children's privacy. It is our policy to Process the personal data of anyone under the age of 20 in accordance with the PDPA.
Contact us
If you wish to exercise your rights relating to your personal data or if you have any questions or concerns regarding this Event Privacy Statement, please contact us.