ความเป็นส่วนตัวและ GDPR
Data Controller Information (ข้อมูลผู้ควบคุมข้อมูลส่วนบุคคล)
ประกาศความเป็นส่วนตัว
บริษัท มิส คอนซัลท์ จำกัด (ต่อไปนี้จะเรียกว่า "บริษัทฯ") ตระหนักและให้ความสำคัญอย่างยิ่งต่อการคุ้มครองข้อมูลส่วนบุคคลของผู้ใช้บริการของบริษัทฯ และยึดมั่นในการเคารพสิทธิความเป็นส่วนตัวของผู้ใช้บริการอย่างเคร่งครัด
ประกาศความเป็นส่วนตัวฉบับนี้ ("ประกาศฯ") จัดทำขึ้นเพื่อแจ้งให้ท่านซึ่งเป็นผู้ใช้บริการของบริษัทฯ ทราบรายละเอียดเกี่ยวกับวัตถุประสงค์ในการเก็บ รวบรวม ใช้ หรือเปิดเผย (รวมเรียกว่า "การประมวลผล") ข้อมูลส่วนบุคคล ตลอดจนสิทธิอันหลากหลายของท่านภายใต้พระราชบัญญัติคุ้มครองข้อมูลส่วนบุคคล พ.ศ. 2562
ในการประมวลผลข้อมูลส่วนบุคคลของท่านตามวัตถุประสงค์ที่ระบุในประกาศฯ นี้ บริษัทฯ ปฏิบัติหน้าที่ในฐานะ ผู้ควบคุมข้อมูลส่วนบุคคล (Data Controller) ซึ่งหมายความว่า บริษัทฯ มีอำนาจและหน้าที่ในการตัดสินใจเกี่ยวกับการเก็บ รวบรวม ใช้ หรือเปิดเผยข้อมูลส่วนบุคคลดังกล่าว
ข้อมูลส่วนบุคคล
Means information about an individual which enables the identification of such individual, whether directly or indirectly, but not including information of the deceased.
Sensitive Personal Data
Means Personal Data that is inherently private, yet delicate and may be susceptible to unfair discrimination, such as race, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or any other data that similarly affects the data subject as announced by the Personal Data Protection Committee.
Company
Means M.I.S.S.CONSULT CO., LTD.
Personnel
Means the staff and employees of the Company under the Labor Protection Act B.E. 2541 (1998) and its amendments.
Company Service Users
Includes:
- Test Takers
Means individuals who participate in psychological tool assessment through tests, surveys, or questionnaires, both in paper and online systems, conducted by the Company or its network, including the Company’s standard tests and tests researched and developed by the Company according to the objectives of groups of persons, juristic persons, government agencies, and state organizations.
- Trainees
Means individuals who participate in training courses conducted by the Company or its network, including in-class training, online training, and self-learning via e-learning systems.
- Instructors/Speakers
Means individuals who participate in training courses conducted by the Company or its network, including in-class training, online training, and self-learning via e-learning systems.
- Website Users
Means individuals who access the Company’s websites: missconsult.com, missconsult.org, disc-thailand.com, missconsult.typeform.com, mc-wisdom.com, missconsult.questionpro.com, psychometrictestcenter.missconsult.com.
- Other Related Parties
Means parties involved in the operations of M.I.S.S. CONSULT CO., LTD. other than Trainees, Instructors/Speakers, and Website Users.
Collection of Personal Data
The Company will collect Personal Data such as Name-Surname, Telephone Number, and Email Address for specified purposes, within a defined scope, and through lawful and fair means. The collection will only be to the extent necessary for the Company's operational purposes.
The Company will ensure that the data subject is aware and provides consent electronically or through the Company’s specified method. If the Company collects Sensitive Personal Data, explicit consent will be obtained from the data subject before collection, unless the collection of Personal Data and Sensitive Personal Data falls under an exception as prescribed by the Personal Data Protection Act B.E. 2562 (2019) or other applicable laws.
Purposes for Collecting and Using Your Personal Data
The Company collects your Personal Data for the following purposes:
-
To support the application and selection process for Test Takers and/or Trainees, and to develop and promote individual potential in various courses organized by the Company or its network, where applicants register or submit applications through the provided channels.
-
To prepare and publish lists or introductory documents for Trainees in various courses organized by the Company and its network, and to disseminate them to the course's Trainees.
-
To prepare and publish lists and brief profiles of the course Instructors/Speakers, and to disseminate them to the Trainees.
-
To prepare and publish class directories for various courses, and to disseminate them to the Trainees.
-
To process and prepare test result reports, and/or individual development plans, and/or overall analysis reports from psychological tool assessments via tests, surveys, or questionnaires, both in paper and online systems, conducted by the Company or its network.
-
To process and prepare training outcome reports for various courses organized by the Company or its network.
-
To process and prepare statistical reports of Trainees across various learning channels on the Company's website system.
-
To prepare and publish videos related to the training for Trainees to review later.
-
To disburse training registration fees and Instructor/Speaker remuneration.
-
For contact, coordination, and provision of news/information to the Trainees.
-
To create promotional media for the Company's courses, where Trainees or Instructors/Speakers appear as part of the media.
-
For the management of training or other internal activities of the Company.
-
For security of the Company's premises or training locations.
Disclosure of Your Personal Data
The Company may disclose your Personal Data to the following types of individuals and channels:
-
Your Affiliated Organization, e.g., in cases where the organization formally requests the Company to send a report of Trainees who are their personnel.
-
Government Officials, authorized agencies, or other individuals for compliance with legal requirements, orders of competent authorities, or court orders/warrants.
-
Network agencies, contractual parties, service providers, or other related persons who are involved or necessary for the Company’s services and your data, such as database system providers, document delivery services, or website developers.
-
Public announcement in cases such as publishing Trainee lists, Instructor/Speaker lists, activity videos related to the training, or promotional media featuring Trainees or Instructors/Speakers, through the Company’s websites (missconsult.com, missconsult.org, disc-thailand.com, missconsult.typeform.com, mc-wisdom.com, missconsult.questionpro.com, psychometrictestcenter.missconsult.com) and Social Media channels such as the Company's Facebook and YouTube.
Where the disclosure of your Personal Data requires your prior consent, the Company will proceed to request consent according to the terms and conditions of the relevant laws.
Your Rights under the Personal Data Protection Act B.E. 2562 (2019)
The Personal Data Protection Act B.E. 2562 (2019) aims to grant you greater control over your Personal Data. You can exercise your rights under this Act once the provisions regarding the data subject’s rights come into effect, as detailed below:
-
Right to Access: To access and receive a copy of your Personal Data, including requesting disclosure of the source of your Personal Data collected without your consent, unless the Company has the right to refuse your request by law or court order, or if accessing and obtaining a copy would adversely affect the rights and freedoms of others.
-
Right to Rectification: To request the correction of your inaccurate or incomplete Personal Data to ensure it is accurate, current, complete, and not misleading.
-
Right to Restriction of Processing: To request the restriction of the use of your Personal Data in any of the following cases:
-
During the period when the Company is reviewing your request to correct your Personal Data to be accurate, complete, and current.
-
Your Personal Data was unlawfully collected, used, or disclosed.
-
When your Personal Data is no longer necessary for the purposes for which the Company informed you of its collection, but you require the Company to retain such data for the establishment, exercise, or defense of legal claims.
-
During the period when the Company is verifying the legal grounds for collecting your Personal Data, or examining the necessity of collecting, using, or disclosing your Personal Data for public interest, due to your exercise of the Right to Object to the collection, use, or disclosure of your Personal Data.
-
-
Right to Object: To object to the collection, use, or disclosure of your Personal Data, unless the Company has lawful grounds to reject your request (e.g., the Company can demonstrate compelling legitimate grounds for the collection, use, or disclosure of your Personal Data which override your interests, or for the establishment, exercise, or defense of legal claims).
Retention Period of Personal Data
The Company retains your Personal Data for the following periods:
-
For Trainee Data: Retained for 1 year from the date your relationship with the Company ends.1
-
For Test Taker Data: Retained for 1 year from the date your relationship with the Company ends.2
-
For Instructor/Speaker Data: Retained for 1 year from the date 3your relationship with the Company ends.
-
For Company Website User Data: Retained for 1 year from the date the Company receives the Personal Data.
-
For Other Related Parties Data: Retained for 1 year from the date the Company receives the Personal Data.
Upon expiration of the specified period, the Company will delete or destroy your Personal Data when it is no longer necessary for the purposes for which you were informed. However, in cases where the Company needs to retain certain parts of the data for your benefit, such as preparing and keeping a directory of course attendees or your certificate as proof of attendance, or in the event you have exercised rights or there is a dispute or legal case related to your training, role as an instructor, or use of services, the Company reserves the right to retain that data until the duty is revoked or the dispute has reached a final order or judgment.
Cookies
The Company collects and uses Cookies and similar technologies on the websites under the Company’s supervision: missconsult.com, missconsult.org, disc-thailand.com, missconsult.typeform.com, mc-wisdom.com, missconsult.questionpro.com, psychometrictestcenter.missconsult.com, or on your device. This is for the purpose of ensuring the security of the Company's services and to provide you, the user, with convenience and a better experience when using the Company's services. This data will be used to improve the Company's website to better meet your needs. You can manually set or delete the use of Cookies from the settings in your Web Browser.
Personal Data Security Measures
The Company implements appropriate technical and administrative security measures to protect your Personal Data against loss, unauthorized access, destruction, use, alteration, correction, or disclosure, consistent with the Company's Information Security Policy and guidelines.
Furthermore, the Company has established a Privacy Policy which is broadly announced throughout the organization, along with operational guidelines to ensure the security of the collection, use, and disclosure of Personal Data, maintaining its Confidentiality, Integrity, and Availability. The Company reviews this policy and Notice periodically as deemed appropriate.
Data Subject and Representative Participation
The Company may disclose your Personal Data upon request from you, your heir, successor, legal representative, custodian, or curator. Requests should be submitted through the M.I.S.S. CONSULT Contact Center, Email: customer.care@missconsult.com.
In cases where you, your heir, successor, legal representative, custodian, or curator objects to the collection, accuracy, or any action such as requesting an update/correction of Personal Data, the Company will record evidence of such objection. The Company may refuse the rights mentioned above if required by law or if your Personal Data has been anonymized or de-identified to the extent that you cannot be identified.
Services by Third Parties or Sub-processors
Where necessary, the Company may assign or procure third parties (Data Processors) to Process Personal Data on behalf of the Company. Such third parties may offer services such as hosting, outsourcing, cloud computing service/provider, or other forms of contract work.
When assigning a third party to Process Personal Data as a Data Processor, the Company will establish an agreement specifying the rights and duties of the Company as the Data Controller and the assigned party as the Data Processor. This includes details of the type of Personal Data assigned for processing, as well as the purposes, scope of Processing, and other related agreements. The Data Processor is obliged to Process Personal Data strictly within the scope specified in the agreement and according to the Company's instructions, and cannot Process it for other purposes.
If the Data Processor assigns a Sub-processor to Process Personal Data on their behalf, the Company will mandate the Data Processor to establish a contractual agreement between the Data Processor and the Sub-processor, in a format and standard no less stringent than the agreement between the Company and the Data Processor.
External Website or Service Links
The Company’s website may contain links to third-party websites or services. These external sites or services may have their own privacy policies or notices that differ from this Notice. The Company recommends that you review the privacy policies or notices of those websites or services to understand the details before accessing them. The Company is not affiliated with and has no control over the Personal Data protection measures of such websites or services, and cannot be held responsible for the content, policies, damages, or actions arising from those third-party websites or services.
Access to Personal Data
The Company has designated that only specific personnel, staff, and individuals with the authority and duty related to the collection, use, and disclosure of Personal Data for this Processing activity will have access to your Personal Data. The Company will ensure that such personnel strictly comply with this Notice.
Changes to the Privacy Notice
The Company may review, amend, or change this Notice as deemed appropriate and will inform you through the Company’s websites: missconsult.com, disc-thailand.com, mc-wisdom.com, with the date of the latest version indicated. The Company encourages you to check regularly for the new Notice, especially before disclosing Personal Data.
Your continued use of the products or services under this processing activity constitutes acknowledgment and agreement to the terms in this Notice. Please discontinue use if you do not agree with the terms herein. If you continue to use the service after the Notice has been amended and posted through the channels mentioned above, it is deemed that you have acknowledged the changes.
Contact Information
Data Controller:
Name: M.I.S.S.CONSULT CO., LTD.
Address: Vanit Place Aree Building A.
1401, 14th Floor 304 Phahonyothin Road, Samsen Nai
Phaya Thai District, Bangkok 10400
Contact Channel: Email: customer.care@missconsult.com
Contact Center: 02279-0014, 085-186-2356
Update: May 31, 2022