Personal Data Protection Policy Statement
The Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center was officially established in May 2024 with the primary objective of serving as a hub for knowledge promotion and the dissemination of emerging technologies to Thai professionals. Our mission is to contribute to the advancement of Thailand’s economic and industrial development.
Pattaya Drone and Robotics Center recognizes the importance of personal data protection. We have implemented appropriate governance, oversight, and data management measures to ensure compliance with the Personal Data Protection Act B.E. 2562 (2019) and other applicable laws.
In accordance with the Personal Data Protection Act B.E. 2562 (2019), we hereby provide the following information outlining the key principles governing our collection, use, disclosure, and protection of personal data.
In the event of any inconsistency between the provisions of this Personal Data Protection Policy and any specific personal data protection notice issued for particular activities, the terms of the relevant activity-specific notice shall prevail.
This Personal Data Protection Policy Contains the Following Key Sections:
Definitions
For the purposes of this Personal Data Protection Policy, the following terms shall have the meanings as set forth below:
| 1. Personal Data
“Personal Data” means any information relating to a person which enables the identification of such person, whether directly or indirectly, but excluding information of a deceased person in particular.
| 2. Sensitive Personal Data
“Sensitive Personal Data” means personal data as prescribed under Section 26 of the Personal Data Protection Act B.E. 2562 (2019), including but not limited to race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health information, disability, labor union information, genetic data, biometric data, or any other data which may affect the data subject in a similar manner as prescribed by the Personal Data Protection Committee.
| 3. Processing of Personal Data
“Processing” means any operation performed on personal data, including but not limited to collection, use, or disclosure of personal data.
| 4. Data Controller
“Data Controller” means a person or juristic person having the authority to make decisions regarding the collection, use, or disclosure of personal data. For the purposes of this Policy, the Data Controller refers to the Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center.
| 5. Data Subject
“Data Subject” means a natural person who is the owner of the personal data for which the Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center acts as the Data Controller.
| 6. Data Processor
“Data Processor” means a person or juristic person who processes personal data on behalf of, or under the instructions of, the Data Controller. Such person or juristic person is not the Data Controller.
Purposes of Personal Data Collection
| 1. Contractual Necessity
To process your request prior to entering into a contract or to perform contractual obligations to which you are a party, including but not limited to:
• Membership applications
• Participation in training programs, seminars, language courses, and other educational activities
• Issuance of certificates
• Performance of any agreement entered into between you and the Center
| 2. Legitimate Interests
For the legitimate interests of the Center or third parties, including but not limited to:
2.1 Contractual Necessity
To process your request prior to entering into a contract or to perform contractual obligations to which you are a party, including but not limited to:
• Membership applications
• Participation in training programs, seminars, language courses, and other educational activities
• Issuance of certificates
• Performance of any agreement entered into between you and the Center
2.2 Legitimate Interests
For the legitimate interests of the Center or third parties, including but not limited to:
2.2.1 Service Management and Development
To manage, improve, and operate our services across all channels, including member and stakeholder relationship management, maintenance, and utilization of information technology systems.
2.2.2 Security Purposes
To implement security measures, including the processing of your personal data in connection with access to our premises, system logins, and access to our website or applications.
2.2.3 Public Relations and Communications
To provide information, news, and member benefits via email, social media, telephone, or direct mail. This may also include educational, analytical, or research-related activities concerning commerce, investment, and industry development, such as surveys, interviews, and opinion requests.
2.2.4 Internal Control and Legal Compliance
To conduct internal audits, financial and accounting audits, fraud prevention, detection of misconduct or unlawful acts, and preparation for legal proceedings, as well as for other legitimate interests of the Center.
| 3. Vital Interests
To prevent or suppress danger to your life, body, or health, or that of other persons, including emergency contact purposes and communicable disease control.
| 4. Legal Obligations
To comply with applicable laws, regulations, and lawful orders of competent authorities.
| 5. Consent-Based Processing
Where you have provided consent, the Center may process your personal data for the following purposes:
5.1 Marketing and Event Communications
To send information regarding seminars, conferences, training programs, study visits, teaching activities, examinations, and other services provided by the Center or its partners via email, social media, telephone, or direct mail.
5.2 Additional Activities
For other activities beyond those stated above, where additional personal data may be collected. In such cases, we will inform you and request your consent on a case-by-case basis. Details regarding consent are provided in Section 4 of this Policy.
Personal Data Collected
The Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center may collect the following categories of personal data:
| 1. Identity Information
Such as title, first name, last name, middle name, nickname, signature, national identification number, nationality, driver’s license number, passport number, household registration information, and other identification details.
| 2. Contact Information
Such as mailing address, telephone number, email address, and social media account identifiers.
| 3. Employment and Educational Information
Such as employment type, occupation, rank, position, job responsibilities, areas of expertise, work permit status, reference information, taxpayer identification number, employment history, salary information, start date, termination date, performance evaluations, benefits and entitlements, assets or equipment in the possession of personnel, work achievements, bank account number, educational institution, academic qualifications, academic records, graduation date, and related information.
| 4. Sensitive Personal Data
Such as biometric data (including facial recognition data, fingerprint data, or iris scan data) for identity verification purposes; religious information appearing on your national identification card for identity verification or tax-related purposes; food allergy information for event management purposes; and other sensitive personal data as defined by applicable law.
Consent and Potential Consequences of Withdrawal of Consent
| 1. Right to Withdraw Consent
In cases where the Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center processes your personal data based on your consent, you have the right to withdraw such consent at any time.
The withdrawal of consent shall not affect the lawfulness of the collection, use, disclosure, or processing of personal data carried out prior to the withdrawal.
| 2. Impact of Withdrawing Consent
If you withdraw your consent or refuse to provide certain personal data to the Center, this may result in the Center being unable to carry out certain or all purposes as described in this Notice.
| 3. Consent from Minors
If you are under 20 years of age, please provide the details of your legal guardian prior to giving consent, so that the Center may obtain consent from the person exercising parental authority, as required by law.
Sources of Personal Data
The Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center collects or obtains personal data from the following sources:
| 1. Direct Collection from the Data Subject
Personal data collected directly from you through various service channels, including but not limited to:
• Application, registration, and enrollment processes
• Job applications
• Contract execution and related documentation
• Completion of surveys or use of services
• Other service channels under the control and supervision of the Center
• Communication with the Center at our premises or through official communication channels
| 2. Collection Through Website and Service Usage
Personal data collected when you access our website or utilize services in accordance with contractual obligations or organizational missions. This may include:
• Monitoring website usage behavior
• Collection through cookies
• Data collected via software installed on your device
(You may review details regarding cookie collection in Section 6 of this Policy.)
| 3. Collection from Third Parties
Personal data obtained from sources other than the data subject, including but not limited to:
• Your lawful representative, in the case where you are a minor
• Your organization or its representative, when you participate in activities on behalf of such organization
• Recruitment agencies or employment service providers
In addition, this includes situations where you provide personal data of third parties to the Center. In such cases, you are responsible for informing those individuals of the details set forth in this Notice (or any relevant activity-specific notice) and for obtaining their consent, where required by law, prior to disclosing their personal data to the Center.
Consequences of Refusal to Provide Data
If you refuse to provide personal data that is necessary for the provision of our services, the Center may be unable to provide such services to you in whole or in part.
Cookies
The Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center collects and uses cookies and similar technologies on websites under its supervision, as well as on your devices, depending on the services you use.
Such technologies are used for service security purposes and to enhance user convenience and overall experience when accessing our services. The information collected through cookies will also be used to improve our website and tailor our services to better meet your needs.
You may manage or delete cookies at any time through your web browser settings.
Disclosure of Personal Data to Third Parties
The Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center may disclose your personal data to the following parties:
| 1. Data Entry Service Providers
| 2. Advisors, Specialists, Assessors, Instructors, Lecturers, and/or External Auditors
| 3. Third-Party Service Providers engaged in administrative or operational services related to the Center’s activities, such as organizing seminars, conferences, training programs, study visits, teaching, or examinations
| 4. Government Authorities or Officials, where required to comply with applicable laws or lawful orders
| 5. External Reporting Service Providers or Recruitment Agencies, where disclosure is part of the recruitment and employee selection process, or other entities involved in employment-related procedures
Third parties are authorized to use your personal data solely for the purposes specified in the agreements entered into with the Center. Such agreements require third parties to comply with applicable laws and any policies or requirements prescribed by the Center. They must also implement appropriate measures to ensure the protection and security of your personal data.
Cross-Border Transfer of Personal Data
| 1. Circumstances for International Transfer
The Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center may transfer your personal data to individuals or entities located in foreign countries where necessary for:
• The performance of a contract to which you are a party;
• The execution of a contract between the Center and another person or juristic entity for your benefit;
• Processing your request prior to entering into a contract;
• Preventing or suppressing danger to your life, body, or health, or that of another person;
• Compliance with applicable laws; or
• Carrying out tasks for important public interest purposes.
| 2. Storage on Overseas Servers or Cloud Platforms
The Center may store your personal data on computer servers or cloud systems operated by third-party service providers. We may also utilize third-party software applications, including Software-as-a-Service (SaaS) or Platform-as-a-Service (PaaS) solutions, for processing personal data.
However, the Center will not permit unauthorized persons to access your personal data and will require such third parties to implement appropriate security measures to ensure the protection of personal data.
| 3. Safeguards for International Transfers
In the event that your personal data is transferred to a foreign country, the Center will comply with applicable personal data protection laws and implement appropriate safeguards to ensure that your personal data is adequately protected.
We will ensure that recipients of the data apply suitable data protection measures and process personal data only to the extent necessary. Appropriate measures will also be taken to prevent unauthorized use or disclosure of personal data.
Data Retention and Retention Period
| 1. Retention Period
The Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center will retain your personal data for as long as necessary to fulfill the purposes for which each category of personal data was collected, unless a longer retention period is required or permitted by law.
Where the retention period cannot be clearly specified, the Center will retain personal data for a period reasonably expected in accordance with applicable data collection standards, such as the maximum statutory prescription period under general law (up to 10 years).
| 2. Deletion and Destruction of Personal Data
The Center has established monitoring and review mechanisms to ensure that personal data is deleted or destroyed once the applicable retention period has expired, or when such data is no longer relevant or necessary for the purposes for which it was collected.
| 3. Retention in Case of Consent-Based Processing
Where the Center processes your personal data based on your consent, such personal data will be processed until you withdraw your consent and the Center has completed the necessary actions in response to your request.
However, the Center may retain certain personal data to the extent necessary for record-keeping purposes, including maintaining evidence that you have withdrawn your consent, in order to appropriately respond to any future requests.
Personal Data Security Measures
| 1. Technical and Organizational Safeguards
The security of your personal data is of utmost importance to the Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center.
The Center has implemented appropriate technical and organizational security measures to protect personal data against loss, unauthorized access, use, alteration, disclosure, or misuse. Such measures include the use of secure technologies and procedures, such as data encryption and access control mechanisms, to ensure that only authorized personnel may access personal data.
Authorized personnel are trained and made aware of the importance of protecting personal data and maintaining confidentiality.
| 2. Continuous Review and Improvement
The Center maintains appropriate security safeguards to prevent unauthorized or unlawful access, use, modification, correction, or disclosure of personal data by individuals without proper authority or responsibility.
These security measures are regularly reviewed and updated as necessary, particularly in response to technological advancements, to ensure that an appropriate level of data protection is maintained at all times.
Rights of the Data Subject
In accordance with the Personal Data Protection Act B.E. 2562 (2019), you are entitled to exercise the following rights:
| 1. Right of Access
You have the right to request access to and obtain a copy of your personal data, as well as to request disclosure of the source of such data, subject to the rules and procedures prescribed by the Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center.
The Center may refuse your request where permitted by law or pursuant to a court order.
| 2. Right to Withdraw Consent
You have the right to withdraw your consent for the processing of your personal data at any time during the period in which the Center retains your personal data.
| 3. Right to Rectification
You may request correction of inaccurate personal data, completion of incomplete data, and updating of your personal data to ensure accuracy and completeness.
| 4. Right to Data Portability
You have the right to request that your personal data, in electronic format as prescribed by law, be transferred to another data controller.
| 5. Right to Object
You have the right to object to the collection, use, or disclosure of your personal data.
| 6. Right to Restriction of Processing
You have the right to request the suspension or restriction of the use of your personal data under conditions prescribed by law.
| 7. Right to Lodge a Complaint
You have the right to lodge a complaint with the Personal Data Protection Committee in the event that the Center, its data processor, employees, or contractors violate or fail to comply with applicable personal data protection laws.
| 8. Right to Erasure
You have the right to request the deletion or destruction of your personal data, except where the Center is required by law to retain such data.
The Center will review and respond to your request in accordance with applicable legal requirements. All rights described above are subject to the conditions and limitations prescribed by the Personal Data Protection Act B.E. 2562 (2019).
Changes to the Personal Data Protection Notice
The Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center will periodically review and update this Personal Data Protection Notice to ensure compliance with applicable laws, regulations, and best practices.
In the event of any changes to this Notice, the Center will promptly inform you by updating the revised version on the official website of the Professional Unmanned Aircraft Training Center – Pattaya Drone and Robotics Center.
We encourage you to review this Notice regularly to stay informed of any updates.
MakeWebEasy