The protection of your personal information, e.g. when you visit our website, when you contact us and when you enter into a contractual relationship with us regarding our services is of the utmost importance to us.
Below you will find information on what data we collect when you visit our homepage, when you fill out our web forms or use other functions on our website, and how and for what purpose we process this data. We collect, process and use personal information only in accordance with the following principles and in compliance with the applicable legal provisions on data protection, especially the Personal Data Protection Act B.E. 2562 (2019), in the following: “PDPA”.
Questions about privacy in connection with our website and the services offered through our website can be directed to us using the contact information in section 1, directly below.
Responsible party and data protection officer
This privacy information applies to the data being processed by:
Chiang Mai Lanna Business Services Ltd.
Address: Airport Business Park Building C 92/1 Mahidol Road, Tambon Haiya Amphur Muang, Chiang Mai 50100
Phone: +66 53 90 47 48 (hereinafter also referred as “CLBS” or “we”).
You can contact data protection officer here:
Collection and storage of personal data and the nature and intended use
While visiting our website
When you visit our website, the browser used on your end device automatically transmits information to the server of our platform. This information is temporarily stored in a so-called log file. The following information is recorded without requiring any action on your part:
- the IP address of the requesting end device,
- the date and time of access,
- the name and URL of the retrieved file,
- the website from which access is made (so-called referrer URL),
- the browser used and, if necessary, the operating system of your computer and the name of your Internet access provider.
The above-listed data will be processed by us for the following purposes:
- to ensure a smooth connection of the website,
- to guarantee a user-friendly experience of our website,
- to evaluate system safety and stability,
- for other administrative purposes.
The data is stored in server log files in a format that allows the identification of the persons concerned, for a maximum period of 14 days, unless a security-relevant event occurs (e.g. a DDoS attack). When a security-relevant event occurs, server log files are stored until the security-relevant event has been eliminated and fully resolved.
The legal basis for data processing is our legitimate interest, which results from the above listed purposes for data collection. Under no circumstances will we use the data collected for the purpose of drawing conclusions about your person. The provision of this data is not required by law or contract or necessary for the conclusion of a contract. You are not obligated to provide us with any personal information. If you choose to not provide such information, it will not be possible to access our website.
When contacting us
We offer you the option of contacting us by clicking on "Contact" at the bottom of our website. You will need to provide us with your name, email address, telephone number and information about your education, language-level and work-experience. Your birthday and further application documents may be provided/uploaded voluntarily.
You also can send us an email to email@example.com using your preferred email server. When doing so, it is necessary to provide your name, a valid email address and a description of your problem so that we know who the request comes from and can appropriately address it. Additional information e.g. as in the application form may be provided voluntarily.
In the event that your enquiry concerns a contract to which you are a contractual party, or concerns the implementation of pre-contractual actions, the data processing will be carried out in accordance with Section 24 (3) PDPA. For all other inquiries, data processing for the purpose of establishing contact is based on a balance of interests (Section 24 (5) PDPA). In this case our legitimate interest is the processing of your request.
If you are interested in our job-offers we store your information in order to find a suitable offer for you or to be able to send you such offers in the future based on the interests you have expressed.
The personal information collected by us in the course of contacting you will be deleted in accordance with the legal requirements after the inquiry you have made has been completed.
Service providers who process personal information on our behalf in foreign countries will only be used if the destination country or international organization that receives such Personal Data has an adequate data protection standard or one of the exceptions mentioned in Section 28 PDPA applies.
Beyond that, we do not transfer or share your personal information with third parties, except for the purposes listed below. We will only disclose your personal information to third parties if the following is applicable:
- you have provided your explicit consent,
- the disclosure of information is necessary to protect our legitimate interests or the legitimate interests of a third party and there is no reason to assume that you have an interest worthy of protection in not disclosing your data,
- in the event that there is a legal obligation for disclosure, and
- a disclosure is legally permissible and required for the processing of contractual relationships.
Please be advised that when you visit our website, we store information on your end device using cookies (please see our Cookie-Policy). Cookies are small files that are transferred to your browser from an Internet server and stored on your hard drive. Information is stored in the cookie, which occurs in connection with the respective end device. This does not mean that we obtain direct knowledge of your identity. We use the term "cookies" in these guidelines for all files that collect data in this way.
When you visit our website, we ask for your consent (Section 24 PDPA) to the use of all cookies that are not absolutely necessary for the provision of our website. You can also visit our website without accepting cookies. Our Cookie-Policy provides detailed information about the cookies we use and you will be able to manage your cookie settings and choose for which cookies you give us your consent.
The tracking procedures listed below and used by us are carried out on the basis of the consent you have provided voluntarily. With the tracking procedures we use, we want to ensure that our platform is designed to meet your needs and is continuously optimized. Furthermore, we want to ensure that we can provide you with personalized recommendations based on your user behavior. We also use the tracking procedures to record the use of our website statistically and to optimize our offers for you. The provision of this information is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obligated to provide this personal information.
The respective data processing purposes and categories of data can be found in the information on the corresponding tracking tools.
Use of Google Analytics in combination with anonymization function
For the purpose of designing our platform to meet the needs of our customers and continuously optimizing it, we use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google"). In this context, pseudonymized user profiles are created and cookies are used.
The information generated by the cookie about your use of this platform, such as
- browser type/version,
- the operating system used,
- referrer URL (the previously visited page),
- host name of the accessing computer (IP address),
- time of the server request,
are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the platform, compile reports on the platform activities and provide additional services connected with the use of the platform and the internet for the purposes of market research and the design of this platform in line with the requirements. This information may also be transferred to third parties if this is required by law or if third parties process this information on our behalf. Under no circumstances will your IP address be merged with other Google data. IP addresses are made anonymous so that an assignment is not possible (IP masking). This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before.
You can prevent the installation of cookies by means of a corresponding setting in the browser software; however, we would like to point out that not all functions of this platform can be used to their full extent in this case. You can also prevent the collection of data generated by the cookie and related to your use of the platform (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on.
Further information on data protection in connection with Google Analytics can be found on Google Analytics Help.
We also use Google Analytics to evaluate data from AdWords and the double-click cookie for statistical purposes. You can deactivate this in the Ads Preferences Manager if you prefer.
Google Tag Manager
We use Google Tag Manager, an application that allows us to manage website tags from a single interface. Tags are small pieces of code on our website that are used, to measure visitor traffic and behavior, measure the impact of online advertising and social channels, use remarketing and targeting, and test and optimize our website among other things. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. The tool triggers other tags that can collect data on their own. Google Tag Manager does not access this data.
We are operating retargeting via Facebook pixel.
For retargeting we use Facebook pixel of Facebook Inc. (1 Hacker Way, Menlo Park, CA 94025, USA) or if you are located in the EU, Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) ("Facebook"). For the United States, the European Commission has issued an adequacy decision (EU/US Privacy Shield) according to which Facebook is certified.
The purpose of Facebook Pixel is to present interest-based ads to visitors of the website within the social network Facebook or when visiting websites that participate in the Facebook advertising network, based on information about their use of this website ("Facebook Ads").
Facebook Pixel is a program code implemented on this website. When you access the website, the program code can trigger the storage of certain details on your end device in the form of cookies, as well the transmission of certain information to Facebook. This includes information that is generated when you access the website via hypertext transfer protocol (HTTP) for technical reasons, for example your IP address. This may also include other information that is already stored in cookies on your device, such as your Facebook user-ID. Therefore, when you visit the website, Facebook recognizes that you have visited this website previously, as well as the type of website content you have accessed. If you have a user account with Facebook, Facebook may associate this information with your user account.
If you do not want Facebook to associate the collected information with your Facebook user account, you can disable the remarketing feature here. To do so, you must be logged in to Facebook. You can also disable cookies in your browser or device settings. You can also make appropriate settings in our Cookie-Policy (see section 4).
Facebook Fan Page
We operate a so-called Facebook Fanpage („Fanpage“) with the social network Facebook. When you visit our Fan Page, your personal data is processed not only by us but also by Facebook. This is the case even if you do not have a Facebook profile. Facebook and our company are jointly responsible for this data processing in accordance with Section 29 PDPA. The agreement on joint responsibility can be found here.
If you have a Facebook profile and visit our Fan Page while you are logged in, only the information displayed on your public Facebook profile will be visible to us as the operator of the Fan Page. In addition, Facebook provides us with anonymous usage statistics that we use to improve your user experience when visiting our Fan Page. We do not have access to the data that Facebook collects to generate these statistics. Facebook has committed itself to fulfil all obligations under the PDPA with regards to this data.
If you use our Fan Page to contact us (e.g. by making your own contributions, responding to one of our contributions or by sending us private messages), the information you provide us with will be processed solely for the purpose of contacting you.
The legal basis for the data processing is Section 24 (5) PDPA. Our legitimate interest lies in Improving your user experience when visiting our Page.
You are not obligated to provide us with your personal information. Omitting person information may result in individual functionalities of our Fan Page not being available to you or only available to a limited extent.
On our website we use the common TLS (Transport Layer Security) procedure in connection with an encryption level that corresponds to the respective state-of-the-art technology. The actual level of encryption also depends on the browser you use. You can determine whether an individual page of our website is being transmitted in encrypted form by the key or lock symbol in the lower status bar of your browser.
We have also taken technical and administrative security precautions to protect your personal information against loss, destruction, manipulation and unauthorized access. All our employees as well as service providers working for us are subject to the valid data protection laws. Our security precautions are subject to a continuous improvement process and our data protection declarations are constantly revised. Please make sure that you have the latest version.
Rights of the individuals affected
You have the following rights:
- to request information about your personal information processed by us;
- to immediately demand the correction of incorrect or incomplete personal information stored by us;
- to request the deletion of your personal information stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (if we have published your personal information, we are obligated, taking into account the available technology and implementation costs, to take reasonable measures, including technical measures, to inform the data controllers who process the personal data that you have requested the deletion of all links or of copies or replications of such personal information)
- to demand the restriction of the processing of your personal information if the accuracy of such information is disputed by you, if the processing is unlawful but you refuse to have it deleted and we no longer need the information, but in the case when you need the data for the assertion, exercise or defense of legal claims or have filed an objection to the processing
- to receive the personal information that you have provided to us in a structured, common and machine-readable format or to request its transfer to another responsible party;
- to revoke your consent towards us at any time. As a result, we are no longer allowed to continue the data processing that was based on this consent in the future and
- to complain to a regulatory agency. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our registered office.
Right to Appeal
If your personal information is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data for reasons relating to your particular situation or direct marketing. In the latter case, you have a general right to appeal, which will be implemented by us without indicating any specific circumstances.
If you wish to make use of your right to cancel or to appeal you can simply send an email to firstname.lastname@example.org.
Applicant Data Protection
If you want to become a member of the CLBS team, your personal data transmitted in the context of this will of course be subject to special data protection regulations. You can find out how we handle these data here.
Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to amend this privacy statement. The current privacy statement can be accessed and printed out at any time by clicking here.