Privacy Policy

VNU EXHIBITIONS ASIA PACIFIC CO.,LTD. and its affiliates include persons involved in the processing of personal data on orders or on behalf VNU EXHIBITIONS ASIA PACIFIC CO.,LTD. (Hereinafter referred to as the “Company”) prioritize personal data and other data relating to you (Hereinafter referred to as, “data”). The purpose is to provide you with the assurance that the Company is transparent and responsible for collecting, using, or disclosing your personal data in accordance with the Personal Data Protection Act B.E. 2019 (“Personal Data Protection Act”). including other relevant laws. This Privacy Policy (“Policy”) is designed to provide you with information about our collection, use, or disclosure (Hereinafter referred to as “Processing”) of personal data processed by the Company including officers and related persons acting on behalf of or on behalf of the Company with the following contents:

This policy applies to current and future personal data of individuals associated with the Company which is processed personal data by staff, contractual employees Business units or other forms of entities operated by the Company as well as parties or third parties who process personal data on behalf of or on behalf of the Company (the “Data processor”) under products and services such as websites, systems, applications, documents or other forms of services controlled by the Company. (Hereinafter referred to as “Services”)

Individuals in relation to the Company under the provisions of the first paragraph include:

1. Individual customers
2. Employees, workers or employees
3. Partners and service providers who are natural persons
4. Executive directors, attorneys, representatives, shareholders, employees or other persons having a relationship similar to a juristic person with the company.
5. Users of the Company's products or services.
6. Visitors to or users of the website https://www.vnuasiapacific.com/our-team/ including any systems, applications, devices, or other communication channels controlled or operated by the Company.
7. Other persons with whom the Company collects personal data such as job applicants, family of officers, guarantors, insurance policy beneficiaries, etc.

Articles 1) to 7) are hereinafter collectively referred to as “you”.

In addition to this Policy, the Company may require a privacy notice (“Notice”) for its products or services to inform the personal data subject who is the user of the personal data being processed, the purposes and lawful grounds for the processing, the retention period of personal data as well as the rights to personal data that the personal data subject may have in a particular product or service.

In the event of a material conflict between the Privacy Notice and this Policy, the Service's Privacy Notice shall be final.

“Personal data” means information about an individual from which an individual can be identified, directly or indirectly, but does not include information of a particular deceased person.

“Sensitive data” means personal data as provided for in Section 26 of the Personal Data Protection Act B.E. 2562, including race, ethnicity, political opinion, ideology, religion or philosophy, sexual behavior, criminal history, health information, disability, trade union information, genetic information, biological information or any other information that affects the subject of personal data in a similar manner as determined by the Personal Data Protection Commission.

“Processing of personal data” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, copying, organization, storage, retrieval, consultation, use, updating, alteration, recovery, disclosure by transmission, dissemination, transfer, combination, or otherwise making available, as well as disposal, erasure, or destruction, etc.

“Data subject” means a natural person who is the owner of personal data collected, used, or disclosed by the Company, including but not limited to job applicants, employees, customers, shareholders, business partners, service providers, and other persons who have an interest in or relationship with the Company.

“Data controller” means a person or entity has the authority to make decisions about the collection, use or disclosure of personal data.

“Data processor” means an individual or a legal entity who is involved in the collection, use or disclosure of personal data on the order or on behalf of the data controller. However, such person or entity is not a controller of personal data.

The Company collects or obtains various categories of personal data from the following sources:

1. Personal data collected directly from the data subject through various service channels, such as during application processes, registration, requests for benefits or support, interviews, execution of contracts or documents, surveys or questionnaires, use of products or services, and during the provision of benefits or support, internships, employment, or other service channels controlled by the Company, as well as when the data subject communicates with the Company at its offices or through other communication channels managed by the Company.
2. Personal data collected from the use of the Company’s website, products, or services, in accordance with contractual obligations or the Company’s mission, such as monitoring usage behavior on the Company’s website, products, or services using cookies or software installed on the data subject’s device.
3. Personal data collected from sources other than the data subject, where such sources have legal authority, lawful grounds, or have obtained consent from the data subject to disclose such information to the Company. Examples include the integration of digital services of government agencies for the provision of public services, receipt of personal data from other government agencies where the Company has duties under its mission to operate a central data exchange platform to support digital government services, as well as cases where personal data may be exchanged with contractual partners as necessary to provide services under a contract.

In addition, where you provide the personal data of third parties to the Company,

you are responsible for informing such individuals of the details contained in this policy or relevant notices of the products or services, as applicable, and obtaining their consent where required before disclosing their personal data to the Company.

4. Personal data obtained or accessed from other sources, such as government agencies, companies within financial business groups, financial institutions, business partners, credit information companies, or data service providers. The Company shall collect such data only where it has complied with applicable legal requirements, unless the collection is permitted by law.
5. Other data, such as website usage data, opinions, preferences, written test results, audio recordings, still images, video recordings, participation in activities or campaigns organized by the Company, and any other information that constitutes personal data under applicable law.
6. Personal data of participants in events, trade shows, seminars, or business activities through lead scanning, including the use of such data for communication, follow-up, or activities in accordance with the purposes notified to the data subjects.
7. Personal data of participants in conferences, seminars, or similar events for purposes relating to registration, attendance management, communication, and other activities associated with organising the events, in accordance with the purposes notified to the data subjects.

However, if a data subject refuses to provide personal data that is necessary for the Company to provide its services, the Company may be unable to provide such services to the data subject in whole or in part.

The Company shall collect personal data with the prior consent of the personal data subject except in the following cases:

1. To perform the contract in the case of collecting, using or disclosing personal data for the necessity of providing services or contracts between the data subject and the Company.
2. To prevent or suppress harm to life, body or health.
3. To comply with the law.
4. To the legitimate interests of the Company if necessary for the legitimate interests of the Company's operations. The Company shall consider the rights of the data subject as important. For example, fraud prevention, network security, protection of the rights, freedoms and interests of all data subjects, etc.
5. To conduct research or statistics in the case of historical documents or archives for the public benefit or related to research studies or statistics in order to provide appropriate safeguards to protect the rights and freedoms of data subjects.
6. To perform state missions if necessary for the performance of duties for the public interest or the performance of duties under the state powers assigned by the Company.

Where it is necessary for the Company to collect your personal data for the performance of a contract, the performance of legal duties or for the necessity of entering into a contract. If you refuse to provide personal data or object to processing for the purposes of the activity, it may result in the company being unable to perform or provide the services you have requested in whole or in part.

The Company shall use lawful means and limits to the extent necessary for the Company's operational purposes, including without limitation the following information:

The Company collects and uses cookies and other similar technologies on websites under its supervision. For example, https://www.vnuasiapacific.com/our-team/ or your device according to the services you use. To ensure the safety of the Company's services and to provide users with a convenient and good experience in using the Company's services, this data shall be used to improve the Company's website to meet your needs as much as possible. You can manually set or delete the use of cookies from the settings in your web browser.

The Company collects your personal data for several purposes. It depends on the type of product or service or activity you use as well as the nature of your relationship with the Company or considerations in each context is important. The purposes stated below are just a general framework for the Company's use of personal data. However, only the purposes related to the products or services you use or are associated with shall apply to your data.

1. It is to enter a contract or for the performance of a contract such as employment contract or any other contractual obligations, or to facilitate the process in accordance with the contract, such as applications or requests before entering into a contract. This also includes conducting transactions related to the company's products or services, such as mass media affairs, artistic works, and literature, which are in accordance with professional ethics , etc. between us and you or a third party for your interests.
2. It is to provide services, enhance the company's products and services, as well as offer other products and services that may be available in the future, and maintain, service, and perform operations related to providing such services.
3. It is to respond to your inquiry and assist you as well as to manage the relationship between us and you.
4. It is to develop and improve or modify the products and services, conduct inspections, survey feedback, and promotion activities of the Company to respond to the needs of the data subject.
5. It is to inform and recommend you about goods, products and services or to publish marketing and promotional materials or other benefits.
6. It is to survey feedback, analyses, research, and gather statistical data for marketing purposes or in order to develop and improve our corporate operations upon the consent of you.
7. It is for the benefit of management or internal operations of the Company necessary under legitimate interests.
8. It is to inspect, supervise, restrict access to controlled areas and maintain security around the building or premises of the Company.
9. It is to comply with laws related to the Company's operations, such as withholding tax, preventing corruption, complaint management.
10. It is to provide data to government agencies with legal authority as requested by government agencies such as the Stock exchange of Thailand, the National Police Agency, the Anti-Money Laundering Office, the Legal Execution Department, the Revenue Department and Court.
11. It is to carry out any accounting and financial activities; including but not limited to auditing, debt notification and collection, tax operations and transactions as prescribed by law;
12. It is for our legitimate interests, including but not limited to audio recordings obtained from Call Center system, photographic images, CCTV recordings for the prevention and detection of crime, and the transfer of personal data within the Company's group for administrative and management purposes, etc.
13. It is for compliance with the law, investigation process, relevant regulations and our legal duties.
14. It is to verify and/or identify the data subject when accessing services through various channels or contact with the Company.
15. It is to respond to requests from government agencies, authorities or foreign governments where the Data Subject resides.
16. It is to respond and/or proceed according to your requests, such as addressing complaints.
17. It is to remedy, prevent harm or limit potential damage that may occur.
18. To undertake any necessary and appropriate actions in various circumstances, including investigating and preventing actual or suspected violations of law, and protecting the rights, privacy, safety, and security of Personnel and Data Subjects.
19. To comply the processes in accordance with the Company's internal regulations, such as employee welfare or other employee benefits, including annual physical examinations.
20. For apply visas in cases where employees are personnel from affiliated companies located overseas, including other travel-related requirements.
21. It is for other purposes upon your explicit consent.

The Company shall not disclose and transmit your personal data to external parties unless with your explicit consent or in the following cases:

1. To achieve the purposes outlined in this Privacy Policy, the Company may be required to disclose or share data only as necessary to partners, service providers or external entities. The Company shall enter into a personal data processing agreement as required by law.
2. The Company may disclose or share personal data with affiliated companies. It shall only process data for the purposes specified in this Privacy Policy.
3. The law or legal process requires disclosure or disclosure to an official, government official or competent authority to comply with a legal order or request.

The Company may transmit or transfer personal data to foreign countries. This shall ensure that the destination country or the destination authority has adequate privacy protection standards and policies.

The Company shall keep your personal data only for as long as is necessary for the purpose for which the data was collected. It shall be in accordance with the details set forth in the relevant policies, notices or laws. However, after the expiration of the period and your personal data is no longer necessary for the aforementioned purposes, the company shall delete and destroy your personal data or to make your personal data no longer identifiable. In the event of a dispute, any exercise of rights or lawsuits in connection with your personal data shall be reserved for the continued retention of that data until the dispute has been finalized by order or judgment.

The Company implements appropriate technical and organizational measures to safeguard personal data, including encryption for data transmission via the internet and restricting access to personal data to authorized personnel only, both in physical and electronic formats.

The Company's services may link to third-party websites or services. Such websites or services may have a personal data protection policy that is different from this policy. The company recommends that you study the privacy policy of that website or service to know in detail before using it. However, the Company is not associated with and has no control over the privacy protection measures of such websites or services and cannot be held responsible for the content, policies, damages or actions caused by third party websites or services.

The Company has appointed a Personal Data Protection Officer to examine, supervise and advise on the collection, use, or disclosure of personal data. It also includes coordinating and cooperating with the Personal Data Protection Commission to comply with the Personal Data Protection Act B.E. 2562.

The Personal Data Protection Act B.E. 2562 (2019) grants several rights to data subjects. You may exercise your rights under the law and as described in this Privacy Notice as follows:

1. Right to Access Personal DataYou have the right to request access to and obtain a copy of your personal data, as well as to request disclosure of the source of your personal data that the Company has collected without your consent. However, the Company may refuse your request where permitted by law or by a court order, or where exercising such rights may adversely affect the rights and freedoms of other persons.
2. Right to Rectification of Personal DataYou have the right to request that your personal data be corrected to ensure that it is accurate, complete, and up to date. If you find that your personal data is inaccurate, incomplete, or not current, you may request that it be corrected so that it is accurate, current, complete, and not misleading.
3. Right to Erasure or Destruction of Personal DataYou have the right to request that the Company delete, destroy, or anonymize your personal data so that it can no longer identify you as the data subject. The exercise of this right is subject to conditions prescribed by law or in the following circumstances:

   (a) When the personal data is no longer necessary for the purposes for which it was collected, used, or disclosed.

   (b) When you withdraw your consent for the collection, use, or disclosure of personal data and the Company no longer has legal grounds to continue processing such data.

   (c) When you object to the collection, use, or disclosure of personal data and the Company does not have lawful grounds to refuse such request, except where the Company has legitimate grounds to refuse your request as permitted by law.

4. Right to Restrict the Use of Personal DataYou have the right to request the restriction of the use of your personal data in the following circumstances:

   (a) When the Company is in the process of verifying your request to correct your personal data so that it is accurate, complete, and up to date.

   (b) When the personal data has been unlawfully collected, used, or disclosed.

   (c) When the personal data is no longer necessary for the purposes for which it was collected, but you request the Company to retain such data for the establishment, exercise, or defense of legal claims.

   (d) When the Company is in the process of verifying legitimate grounds for collecting personal data or reviewing the necessity of collecting, using, or disclosing personal data for public interest purposes following your objection to such processing.

5. Right to Object to the Processing of Personal DataYou have the right to object to the collection, use, or disclosure of your personal data, except where the Company has lawful grounds to refuse your request, such as where the Company can demonstrate compelling legitimate grounds for processing your personal data that override your rights, or for the establishment, exercise, or defense of legal claims. You may object at any time in the following circumstances:

   (a) Where personal data is processed on the basis of legitimate interests, unless the Company demonstrates compelling legitimate grounds for the processing or for the establishment, exercise, or defense of legal claims.

   (b) For direct marketing purposes.

   (c) For scientific, historical, or statistical research purposes, unless such processing is necessary for the performance of a task carried out for reasons of public interest.

6. Right to Withdraw ConsentWhere you have given consent to the Company to collect, use, or disclose your personal data (whether such consent was given before or after the Personal Data Protection Act B.E. 2562 (2019) came into force), you have the right to withdraw such consent at any time during the period your personal data is retained by the Company, unless there are legal restrictions requiring the Company to continue retaining the data or there is still a contractual relationship between you and the Company that benefits you.
7. Right to Data PortabilityYou have the right to receive your personal data from the Company in a format that is readable or commonly usable by automatic tools or devices and can be used or disclosed by automated means. You may also request that the Company transmit or transfer such personal data in that format to another data controller, subject to the conditions prescribed by law.
8. Right to Lodge a ComplaintYou have the right to lodge a complaint with the relevant expert committee under applicable law if the Company violates or fails to comply with the Personal Data Protection Act B.E. 2562 (2019).

The Company reserves the right to consider your request to exercise these rights and to proceed in accordance with the requirements prescribed by personal data protection laws.

Failure to comply with the policy may result in an offense and be subject to disciplinary action in accordance with the Company's rules (for officers or operators). or in accordance with the personal data processing agreement (for personal data processors). However, it is subject to the case and your relationship with the Company and may be subject to penalties as determined by the Personal Data Protection Act B.E. 2562 along with all secondary laws, rules, regulations, and relevant orders.

In the event that you become aware that the Company has not complied with the Personal Data Protection Law, you have the right to submit a complaint to the Personal Data Protection Committee, or a supervisory authority appointed by the Personal Data Protection Committee or by law. Before making such a complaint, please contact the Company to give us an opportunity to know the facts and clarify the issues and resolve your concerns in the first place.

The Company may update, amend or change this Policy at its discretion by notifying you through https://www.vnuasiapacific.com with the effective date of each revised version. However, the Company would like to advise you to regularly check for the latest version of the Policy through specific channels for activities at the Company before you disclose your personal data to the Company.

Access to the Company's products or services after the enforcement of the new policy constitutes acceptance of the terms of the new policy. Please stop using it if you do not agree with the details in this policy and please contact us for further clarification.