NETiDENT Privacy Policy

Summary

We process customers' personal data as outlined in this privacy policy, ensuring it is protected in accordance with the highest standards and compliant with the Personal Data Protection Act, B.E. 2562. You can find detailed policy information via the QR Code, summarized below for convenience. What data do we process? We process necessary personal data collected from you, including identity information, address and contact information, financial information, etc.

How do we use the data? We use personal data to perform various operations per NETiDENT’s objectives, which we have explained in detail. To whom do we share the data? We may need to share personal data with external entities as necessary, as explained, along with a list of entities to whom data is shared.

What can users do? You have the rights to access, correct, or delete your data as explained. Policy changes We will notify you of significant policy changes and may periodically update you regarding the processing of your personal data.

Full NETiDENT Privacy Policy

1. Scope and Purpose of This Policy
2. What Personal Data Do We Process?
3. How Do We Collect Personal Data?
4. How Do We Use Personal Data?
5. Sharing Personal Data with External Parties
6. Transferring or Sending Data Abroad
7. Security of Personal Data
8. Retention Period of Personal Data
9. Rights of Data Subjects
10. Review and Update of This Policy

1. Scope and Purpose of This Policy

This document is the Personal Data Protection Policy for NETiDENT customers, with NETiDENT being the personal data controller under the Personal Data Protection Act B.E. 2562. It explains how NETiDENT collects and uses the personal data of its customers within the scope and purposes of NETiDENT. Contact Details of Data Controller/Data Processor MFEC Public Company Limited (Head Office) 349 SJ Infinite One Business Complex, Vibhavadi Rangsit Road, Chomphon, Chatuchak, Bangkok 10900

Contact Details of Data Protection Officer Piamnatda Kantawong, Email: [email protected]

This policy covers customers, including potential customers and buyers of products. The term "processing" in this policy refers to any actions NETiDENT takes concerning customers' personal data, including collection, use, storage, disclosure, and deletion of personal data. The term "basis of processing" refers to the necessity reasons for processing personal data under Sections 24 and 26 of the Personal Data Protection Act B.E. 2562. This policy may be reviewed and updated as necessary, with proper notice provided through appropriate communication channels.

2. What Personal Data Do We Process?

NETiDENT processes the following personal data:

• Identification Data: such as first and last names, personal photographs, etc.
• Contact Information: such as company name, workplace, email, mobile phone number, office phone number, fax number, LINE ID, LinkedIn, Instagram, Facebook, TikTok, Twitter, etc.
• Financial Information: such as proof of payment, date, and time of payment, etc.
• Work Information: such as job position, department, etc.
3. How Do We Collect Personal Data?

Generally, NETiDENT collects personal data directly from customers through processes such as:

• Via LINE Official Account or Facebook
• Entering data on NETiDENT's website system
• Recording information during website visits
• Customer feedback and satisfaction forms/records
• Recording of images and sound Currently, there is no additional data collection from external entities.
4. How Do We Use Personal Data?

We use personal data for operations related to the purposes of NETiDENT concerning customers, based on the personal data processing basis under the Personal Data Protection Act B.E. 2562.

NETiDENT will process personal data for the purposes stated only. In some cases, we may process personal data for related and consistent reasons beyond the original purposes. However, if we need to process data for unrelated purposes, we will seek new consent for using the data for those new purposes.

5. Sharing Personal Data with External Entities

NETiDENT may need to share personal data with the following external entities to fulfill contractual or legal obligations:

• Partners/Vendors
• Shipping Companies

When sharing or sending personal data to external entities, we will do so only as necessary, using or sending minimal data. We may consider anonymization or pseudonymization methods for data security. External entities processing data for NETiDENT must implement appropriate personal data protection measures as per this policy, and we will not permit these entities to use the data for purposes other than those specified by us.

6. Transferring Data Abroad

Currently, NETiDENT does not transfer any data abroad.

7. Personal Data Security Measures

NETiDENT, as the personal data controller, has implemented security measures for customers' personal data. If there are data processors, they must follow instructions and agree to maintain data security as defined by NETiDENT.

8. Retention Period for Personal Data

We will retain personal data for the duration necessary to fulfill NETiDENT's purposes, including contractual, legal, and monitoring requirements.

9. Rights of Data Subjects

You have the following rights regarding your personal data:

• Right of Access: You can request a copy of your data and verify that we process it lawfully.
• Right to Data Portability: If we have prepared personal data in a readable or generally usable format by automated tools or devices, you can request to transfer your data to another entity by automated means.
• Right to Object: You can object to data processing in cases of public tasks, legitimate interests, direct marketing, scientific/historical research, or statistics unless necessary for public interest.
• Right to Erasure: You can request deletion or anonymization of data in certain cases, such as when it's no longer necessary for processing, when you withdraw consent, when you object to processing, or when data is processed unlawfully.
• Right to Restrict Processing: You can request to limit the use of your data in certain cases, such as when verifying data accuracy, when data should be deleted but you request restriction, when data is necessary for legal claims, or during objection verification.
• Right to Rectification: You can request correction of incorrect, incomplete, or outdated data.

In some cases, we may be unable to comply with your request due to legal or contractual obligations. However, if you have consented to data processing, you can withdraw it at any time by contacting the relevant department. We will cease processing the data as soon as possible. Note that withdrawal of consent does not affect prior processing activities.

We will record actions taken regarding your requests for problem resolution. If you have questions about data protection practices, you may consult the Personal Data Protection Guidelines (TDPG3.0).

If you wish to exercise these rights or have complaints about data processing, please contact our Data Protection Officer ([email protected]). We will act on your request promptly in compliance with legal requirements. You also have the right to file a complaint with the Data Protection Authority.

10. Policy Review and Updates

This Personal Data Protection Policy for NETiDENT customers was last updated on 17/07/2567. We reserve the right to review and update this policy as deemed appropriate. We will notify you of significant changes and may periodically remind you about personal data processing.