Cars24 Group (Thailand) Co., Ltd. including its holding company, subsidiaries, affiliates (the “Company”) firmly believes in the highest standards of integrity for Personally Identifiable Information (“PII”) provided by its customers at the time of interaction with the Company, and otherwise.
The Company values its customers’ privacy and is committed to protecting the PII disclosed by customers (“You”, “Your” or “Data Subject”, as applicable) to the Company by any means. The Company is committed to protecting Your PII, in accordance with the Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”) and applicable related regulations thereof which are available on the announcement date of this Privacy Notice.
Please read the following Privacy Notice terms to understand the Company’s practices specifically with regard to how the Company treats Your PII. This Privacy Notice also applies generally to the websites of our parent entity, affiliates, subsidiaries or joint venture entities, which may or may not be referred to in the Website’s content.
The Company needs to collect, use and/or disclose Your PII which is necessary to perform administrative activities or transactions of the Company as described in the Section 2 of this Privacy Notice. The Company classifies the categories of PII with examples as follows:
|Examples of PII
Please note that the following list is only illustrative, and is by no means, exhaustive.
The Company would like to notify You of the impact in the event that You do not provide the aforementioned PII to the Company. In such event, the Company may not be able to take relevant actions on Your PII which may affect the quality of service or the execution of clerical activities or transactions for You. The Company will ensure that our collection, processing and/or disclosure of Your PII will be limited as necessary under a lawful purpose and basis and compliant with the PDPA and applicable and relevant secondary laws.
|Activity/Purpose of collection, use and/or disclosure of PII
Performance of Contact
The Company will retain Your PII on our servers for as long as is reasonably necessary for the purposes listed in this Privacy Notice. In some circumstances, the Company may retain Your PII for longer periods of time, for instance where the Company is required to do so in accordance with any legal, regulatory, tax or accounting requirements.
Where Your PII is no longer required, the Company will delete, destroy, pseudonymize, anonymize or make such PII non-personally identifiable information, unless there is a legal obligation or technical reasons whereby the Company may keep Your PII for a longer period of time.
The Company shall be at liberty to disclose, share or transfer Your PII or part thereof to third-party service providers who may facilitate the providing of services, on the Company’s behalf. These service providers have access to Your data only to perform the tasks as stipulated by the Company and are obligated not to disclose or use it for any other purpose. The Company may also share Your PII with third-party vendors, consultants and other service providers who work for the Company, who are bound by contractual obligations to keep Your PII confidential and use it only for the purposes for which the Company discloses, shares or transfers it to them.
In addition to the aforesaid, alliance partners / channel partners of the Company may collect Your PII with Your consent from Your mobile device such as device location, device information (including storage, model, installed apps, Wi-Fi and mobile network), transactional and promotional SMS and communication information including contacts to provide customized offerings.
The nature of modern business practice is necessary for the Company to transfer Your PII internationally for storage and/or processing in relation to the mentioned purposes in this Privacy Notice. The Company will ensure to have Your PII transferred with appropriate security measures in order to protect Your PII transfer in accordance with the PDPA, which includes the following circumstances:
To comply with a legal obligation.
To obtain Your consent and inform You of inadequate PII protection standards of the destination country or international organization which received Your PII.
To perform the agreement made by You with us or at Your request before entering into an agreement.
To comply with agreements between us and other parties for Your own interest.
To prevent or suppress a danger to Your or another person’s life, body or health, and You are incapable of giving consent at such time.
To carry out activities relating to substantial public interest.
As part of our services, You may provide Your reviews, feedback, comments, ratings, photos, etc., on the public groups (Posts). The Company retains an unconditional right to remove and delete any Post or such part of the Post that, in the opinion of the Company, is false, mala fides and misrepresenting. All Posts shall be publicly accessible and visible to all users and, therefore, You should be careful about revealing any sensitive details about Yourself in such Posts. The Company reserves the right to use and reproduce Your Posts for any purpose. Further, the Company may share Your Posts with service providers, businesses or any other third party. If You delete Your Posts from any of the public groups, copies of such Posts may remain viewable in archived pages, or such Posts may have been copied or stored by any other user(s) of that public group.
Cookies are text files placed on Your computer that are used to store details of Your internet usage logs or Your visits to the Website.
The Company uses various types of cookies on its Website, as follows:
Cookies that are necessarily used for the Website operation process (Strictly Necessary Cookies), in order for the Website to function properly. To delete or prevent this cookie is not possible.
Cookies that are used to analyze and measure the performance of the Website (Analytical/Performance Cookies). These cookies allow us to recognize and count the number of visitors and to see how visitors move around and use our Website. These cookies are used for web enhancement and optimization purposes and to aggregate statistics on how our visitors reach and browse our Website.
Cookies used to help remember settings information or the choices You have made on the Company’s website (Functionality Cookies). These are used to enable us to personalize our content for You, tailor the website for Your needs and remember Your preferences, for example, Your choice of language or browsing font size.
Cookies for advertising (Advertising Cookies). These cookies will remember Your preferences that You used on the website, to tailor advertising to You that is relevant to You.
You can usually choose to set Your browser to remove cookies and to reject cookies, except those used for the purposes of the website system’s operations. If You choose to remove cookies or reject cookies, this could affect certain features of the CARS24 Website/ mobile application.
The Company hereby assures You that the collection and processing of Your PII over the Website is done in a secure and encrypted manner to maintain the safety and privacy of Your PII to prevent the loss, access, use, alteration, amendment or disclosure of PII without authority or due to abuse, for example, by limiting access to PII. The Company further assures you that the Website’s servers and systems have been secured by hosting with AWS, installing anti-virus and anti-malware software and regular security auditing. The Company follows best practices in terms of administration and operations.
You have rights to Your PII under the PDPA, and the Company will respect Your rights by taking actions in accordance with any laws, rules or regulations relating to the processing of Your PII. You may exercise the following rights of a Data Subject unless the Company has grounds to lawfully reject Your request:
Right to withdraw consent – You have the right to withdraw Your consent. The withdrawal of consent will not affect the lawfulness of the collection, use and/or disclosure of Your PII based on Your consent before it was withdrawn.
Right to access and obtain a copy – You have the right to access and obtain a copy of Your PII that is retained by the Company.
Right to data portability – You have the right to receive Your PII where the Company can arrange for such PII to be in a readable or commonly used form, by way of automatic tools or equipment or format and can be used or disclosed by automated means. In addition, You have the right to request the Company to send or transfer Your PII to a third party, or to receive Your PII which has been sent or transferred to a third party by the Company.
Right to object – You have the right to object to the collection, use and/or disclosure of Your PII where the Company proceeds on a legitimate interest basis, or it is for a direct marketing purpose, or for scientific, historical or statistical research purposes.
Right to erasure – You have the right to request the Company to delete, destroy or anonymize Your Personal Identifiable Information in the event that the Company does not need or has no legal right to keep such Personal Identifiable Information.
Right to restrict – You have the right to request the Company to restrict the use of Your PII under certain circumstances when there is a pending examination process of the Company in accordance with Your request to rectify Your PII or object to the collection, use and/or disclosure of Your PII, or Your request to restrict the use of Your PII instead of the deletion or destruction of Your PII.
Right to rectification – You have the right to rectify Your PII that is inaccurate and to update Your PII to not cause any misunderstandings.
Right to lodge a complaint – You have the right to make a complaint with the Personal Identifiable Information Protection Committee or their office where the Company does not comply with the PDPA.
If You have a privacy concern or question related to this Privacy Notice or would like to exercise Your rights, please feel free to contact us on (between 8 am - 10 pm) or reach out to our customer support at [email protected].
You may access our Website through third-party websites over which the Company has no control. You may optionally provide the Company with information through third-party sign-in services such as Facebook, Pinterest, Twitter, Instagram and Google Plus. In such cases, the Company shall fetch and store whatever information is made available to the Company by You through these sign-in services. Please also note that the Company reserves its rights to use information provided by You, in accordance with the PDPA and the applicable related regulations thereof which are available on the announcement date of this Privacy Notice.
The Company reserves the right to amend or modify this Privacy Notice at any time, as and when the need arises. If the Company decides to change this Privacy Notice, the Company will post the updated version on this page and/or update the modification date below. We request You to regularly check this Privacy Notice from time to time to keep You updated about changes made. Your continued use of the services provided by the Company after any changes, shall be deemed to be Your acceptance of such changes.
This Privacy Notice was issued on was last updated on 18th May, 2021 (Version 1.0).