Lamptan Lighting (2001) Co., Ltd. ("the Company") aims to help people create the changes they want to see and seeks to develop the best technology to protect online privacy and security.
Therefore, the Company intends to collect personal data that can identify an individual, whether directly or indirectly, including data that requires special care in collection or processing. This privacy policy (hereinafter referred to as the "Policy") is effective from March 17, 2021, with the following details:
Article 1: Definitions
Under this Policy:
"Website" means the website named "Lamptan" with the URL https://www.lamptan.co.th/ or any other website subsequently created by the Company.
"Data Controller" means the service provider or website owner under this Policy, i.e., Lamptan Lighting (2001) Co., Ltd.
"Data Processor" means any individual or legal entity that processes data for the benefit or on behalf of the Data Controller.
"Data" means any representation that conveys facts, information, or anything, whether conveyed by the nature of the thing itself or by any method, and whether recorded in documents, files, reports, books, maps, drawings, photographs, films, image or sound recordings, computer recordings, electronic methods, or any other method that makes the recorded information visible.
"Personal Data" means any information about an identified or identifiable natural person, either directly or indirectly.
"Sensitive Personal Data (Sensitive Data)" means personal data related to race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health data, disabilities, genetics, biometric data, facial recognition data, iris scans, fingerprints, trade union data, or other data as declared by the Personal Data Protection Committee under the Personal Data Protection Act to be sensitive.
"Data Subject" means you, the visitor, registrant, or member of the website who owns the personal data according to this Policy.
Article 2: Consent of the Data Subject
When registering on the website, the Data Subject agrees and consents to the collection and use of personal data as follows:
(2.1) The purpose of collection and use of personal data: The Data Subject acknowledges and consents that the Data Controller collects and uses personal data only for the following purposes: to gather customer personal data for study, analysis, and customer satisfaction, to develop or design products to meet customer needs, or to offer products and services to customers; and to use personal data for marketing, publicity, and advertising, both directly and indirectly.
(2.2) Personal data collected and registered: The Data Subject acknowledges, agrees, and consents to the Data Controller collecting and using only the personal data specified.
Lamptan Lighting (2001) Co., Ltd.
Address: No. 3 Soi Thian Thale 19, Bang Khun Thian-Chai Thale Road, Tha Kham Subdistrict, Bang Khun Thian District, Bangkok 10150
Phone: 0-2451-2968-9
Email: customerservice@lamptan.co.th
(2.3) The Data Subject agrees to allow the Company to share data with affiliated companies, including Lamptan Property Co., Ltd. and Lamptan Lighting Technology Co., Ltd., who have rights to such data.
(2.4) Data retention period: The Data Subject acknowledges, agrees, and consents to the Data Controller collecting and using personal data for a total period of 24 (twenty-four) months from the date consent is given under this Policy.
Article 3: Linking Data with Third-Party Service Providers
The Data Subject acknowledges, agrees, and consents that the Data Controller may link the Data Subject's data with third-party service providers. The Data Controller will inform the Data Subject about which data will be linked or shared before each instance. Consent may be expressed explicitly by actions such as clicking "accept," linking, sharing, or other clear actions indicating consent.
Article 4: Withdrawal of Consent
The Data Subject has the right to withdraw any consent given under this Policy at any time by providing written notice via email to customerservice@lamptan.co.th.
Article 5: Rights of the Data Subject
When registering on the website and giving consent under this Policy, the Data Subject acknowledges their rights under the Personal Data Protection Act, including but not limited to:
(5.1) Withdrawing consent at any time in writing.
(5.2) Accessing and requesting copies of personal data collected.
(5.3) Being informed by the Data Controller about any personal data collected without consent.
(5.4) Objecting to collection, use, or disclosure of personal data beyond the stated purposes.
key 'privacy-policy.article5.right5 (en)' returned an object instead of string.
(5.5.1) The data is no longer necessary for the purposes collected.
(5.5.2) Consent has been withdrawn and the Data Controller lacks lawful authority to continue processing.
(5.5.3) The Data Subject objects lawfully to the processing.
(5.5.4) Data has been collected or processed unlawfully.
key 'privacy-policy.article5.right6 (en)' returned an object instead of string.
(5.6.1) During investigation by the Personal Data Protection Committee as complained by the Data Subject.
(5.6.2) Personal data has been collected, used, or disclosed unlawfully.
(5.6.3) When the Data Subject needs the Data Controller to retain personal data for legal claims purposes.
(5.6.4) During verification or investigation to reject objections to data collection, use, or disclosure.
(5.7) Requesting correction of inaccurate, outdated, incomplete, or misleading personal data.
(5.8) Filing complaints with the Personal Data Protection Committee in case of violations.
Article 6: Security Measures
The Data Controller shall implement appropriate security measures to prevent data loss, unauthorized access, alteration, or disclosure, including access rights management, encryption, firewalls, and IP security protocols.
Article 7: Updating Personal Data
The Data Controller will:
(7.1) Correct and update personal data to be accurate and complete.
(7.2) Delete or destroy personal data exceeding retention periods.
(7.3) Delete or destroy irrelevant personal data beyond the consented purposes.
Article 8: Collection, Use, and Disclosure Without Consent
The Data Subject acknowledges and agrees that the Data Controller may collect, use, or disclose data without prior consent when necessary and under these circumstances:
(8.1) For historical or archival purposes benefiting the public.
(8.2) To prevent or mitigate harm to life, body, or health.
(8.3) Necessary for contract performance or pre-contractual measures.
(8.4) Necessary for public interest duties or state authority.
(8.5) For legitimate interests outweighing fundamental rights of the Data Subject.
Article 9: Sensitive Personal Data
The Data Subject acknowledges that the Data Controller may collect, use, or disclose Sensitive Data without prior consent only when necessary and under specific cases like:
(9.1) To prevent harm to life or health when consent cannot be obtained.
(9.2) When data is publicly disclosed with explicit consent.
(9.3) For establishment, exercise, or defense of legal claims.
key 'privacy-policy.article9.section4 (en)' returned an object instead of string.
(9.4.1) Medical, social welfare, public health, labor protection, research, or public interest.
(9.4.2) Public health benefits such as disease prevention or quality control of medical products.
(9.4.3) Labor protection, social security, national health insurance, medical welfare.
(9.4.4) Scientific, historical, or statistical research or other public benefits.
(9.4.5) Important public missions.
Article 10: Registration by Persons Under Guardianship
The Data Subject guarantees they will not allow legally incapacitated persons under their guardianship or care to visit, register, or become members of the website. If such persons are allowed, the Data Subject is deemed to have given consent on their behalf.
(10.1) Incompetent persons under the Data Subject's guardianship.
(10.2) Quasi-incompetent persons under the Data Subject's care.
Article 11: International Data Transfer
The Data Controller may transfer personal data abroad if:
(11.1) The destination country or international organization has adequate data protection standards.
(11.2) Consent is obtained with awareness of insufficient protection.
(11.3) Compliance with law.
(11.4) Necessary for contract performance.
(11.5) Contractual necessity for Data Subject's benefit.
(11.6) To prevent harm when consent cannot be given.
(11.7) For important public missions.
Article 12: Data Breach Notification
If a data breach occurs, the Data Controller will:
(12.1) Notify the Personal Data Protection Committee within 72 hours if there is a risk to individual rights or freedoms.
(12.2) Notify both the Committee and the Data Subject if there is a high risk to rights or freedoms within 72 hours.
Article 13: Complaints and Issues
Data Subjects may file complaints or report issues, including requests to update data or object to processing, at:
Lamptan Lighting (2001) Co., Ltd.
Address: No. 3 Soi Thian Thale 19, Bang Khun Thian-Chai Thale Road, Tha Kham Subdistrict, Bang Khun Thian District, Bangkok 10150
Phone: 0-2451-2968-9
Email: customerservice@lamptan.co.th
Article 14: Record Keeping
Unless otherwise specified by law, the Data Controller will keep important records of data collection, use, or disclosure for inspection by Data Subjects or government agencies, including:
(14.1) Personal data collected.
(14.2) Purpose of collection.
(14.3) Data Controller information.
(14.4) Retention periods.
(14.5) Access rights and conditions.
(14.6) Exceptions to consent.
(14.7) Requests and objections.
(14.8) Security measures.
Article 15: Policy Amendments
The Data Controller may amend this Policy at any time in whole or in part and will notify Data Subjects to obtain acceptance electronically or otherwise. Accepted amendments become part of this Policy.
Article 16: Relationship of Parties
Both parties acknowledge that this Policy does not create an employment or partnership relationship between the parties or their employees.
Article 17: Assignment of Rights
Unless expressly stated otherwise, neither party shall assign rights or obligations under this Policy without prior written consent from the other party.
Article 18: Dispute Resolution
Any disputes arising from this Policy that cannot be resolved amicably shall be brought before a Thai court.
