{"id":38990,"date":"2020-05-09T16:21:09","date_gmt":"2020-05-09T09:21:09","guid":{"rendered":"https:\/\/www.oalt.co.th\/?page_id=38990"},"modified":"2025-12-01T16:53:43","modified_gmt":"2025-12-01T09:53:43","slug":"privacy","status":"publish","type":"page","link":"https:\/\/www.oalt.co.th\/en\/privacy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

Personal Data Protection Notice<\/h1>\n

Orico Auto Leasing (Thailand) Ltd.<\/h1>\n

 <\/p>\n

Orico Auto Leasing (Thailand) Ltd. (the “Company”)<\/strong> is committed to operating in compliance with the Personal Data Protection Act B.E. 2562 (2019) and other related laws. Therefore, the Company has established this Personal Data Protection Policy (“Policy”) to inform data subjects about the purposes and details of the collection, use, and\/or disclosure of personal data, as well as their various legal rights and effective and appropriate personal data management measures.<\/span><\/p>\n

Article 1 Scope of Data Subjects<\/h4>\n

This Policy applies to all levels of employees of the Company. It aims to establish clear measures and practices for Personal Data protection. All employees are required to strictly adhere to this Policy within the framework of the law, as well as contracts, terms, and various products or services such as websites, applications, documents, or other services under the Company\u2019s control (collectively, \u201cServices\u201d). This is to ensure that the Company\u2019s management and processing of personal data is lawful, transparent, and secure.<\/span>
\nPersonal Data that may be processed or handled by the Company includes the Personal Data of the following \u201cData Subjects\u201d:<\/span><\/p>\n

1) Customers, lessees, loan applicants, other service applicants, guarantors, security providers who are natural persons, as well as inquirers and individuals who receive information about the Company\u2019s products and\/or services.<\/span><\/p>\n

2) Permanent employees, probationary employees, temporary employees, expatriate employees, interns, and\/or officers, staff, or employees of the Company, or job applicants who may be hired by the Company in the future.<\/span><\/p>\n

3) Contacts, business partners, service providers, and individuals who build relationships with the Company, and sellers of goods to the Company who are natural persons.<\/span><\/p>\n

4) Directors, authorized persons, representatives, agents, shareholders, partners, employees, personnel, or other individuals with similar relationships to legal entities associated with the Company, such as corporate clients, guarantors, security providers, partners, service providers, or users of the Company\u2019s products or Services, including government agencies, state enterprises, or various organizations, etc. <\/span><\/p>\n

5) Participants in the Company\u2019s activities or projects, or users of the Company\u2019s products or Services.<\/span><\/p>\n

6) Visitors or users of websites, software, systems, applications, devices, platforms, social media accounts, or other communication channels controlled by the Company.<\/span><\/p>\n

7) Other individuals related to the above Data Subjects, such as beneficiaries of insurance policies, spouses and\/or domestic partners, children, parents, and siblings.<\/span><\/p>\n

8) Other individuals from whom the Company collects Personal Data, such as contacts, payers, or vehicle occupants.<\/span><\/p>\n

For Personal Data collected before the Personal Data Protection Act B.E. 2562 came into effect, the Company may continue to collect and use such data for its original purposes. However, disclosure and other actions beyond collection and use must comply with the Personal Data Protection Act B.E. 2562 and related laws.
\n<\/span><\/p>\n

Article 2 Collection of Personal Data<\/h4>\n

The Company collects Personal Data, such as personal details, information about personal life or interests, financial data, and Sensitive Data, as necessary and under lawful purposes. The sources and principles for collecting Personal Data are as follows:<\/span><\/p>\n

2.1 Sources of Personal Data<\/span><\/h5>\n

The Company may obtain Personal Data from the following channels:<\/span><\/p>\n

1) Directly from the Data Subject: Such as collecting Personal Data from application forms (both paper and online), questionnaires, job applications, signed contracts or documents, or when the Data Subject communicates with the Company through designated channels.<\/span><\/p>\n

2) From the Data Subject\u2019s use of websites, software, systems, applications, or platforms under a service agreement, such as tracking usage behavior on the Company\u2019s websites, products, or Services using cookies or software on the Data Subject\u2019s device.<\/span><\/p>\n

3) From social media accounts or external user account providers with which the Data Subject has agreed or consented to disclose their Personal Data to the Company to link their external account with the Company\u2019s Services. In this case, the Personal Data disclosed to the Company will be in accordance with the necessity and\/or settings of the Data Subject under the privacy policy of that external service provider.<\/span><\/p>\n

4) From sources other than the Data Subject directly, where the Company can lawfully collect from such sources or has obtained the Data Subject\u2019s consent for disclosure to the Company. This includes searching public sources, government agency data, inquiring with third parties, or disclosures by affiliated companies, business partners, recruitment agencies, previous employers, and references, or third parties for the purposes specified in this Policy.<\/span><\/p>\n

Examples of types of Personal Data that the Company may collect include:<\/span><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Type of Personal Data<\/span><\/th>\nDetails and Examples<\/span><\/th>\n<\/tr>\n
Data about Personal Identity<\/span><\/td>\nPrefix, first name, middle name, last name, alias, national identification card number or passport number or personal identification number, nationality, country of residence, house registration data, driver\u2019s license data, visa data, signature, social security number, financial and health data, or other government document data that can identify an individual, application username and password, copy of national identification card including copies of other identification cards, copy of house registration, and including conversation records between the Data Subject and the Company, etc.<\/span><\/td>\n<\/tr>\n
Data about Personal Characteristics<\/span><\/td>\nDate of birth, gender, height, weight, age, marital status, military conscription status, photograph, spoken language, behavioral data, preferences, data on bankruptcy status, data on status as an incapacitated or quasi-incapacitated person, etc.<\/span><\/td>\n<\/tr>\n
Contact Information<\/span><\/td>\nHome phone number, mobile phone number, fax number, email, address according to important documents, current residential address, and address in the country of nationality, workplace, postal address, social media username (website\/application accounts for Line, Facebook, Apple, Google, or Microsoft), map location of residence, proof of residency in Thailand, etc.<\/span><\/td>\n<\/tr>\n
Employment, Education, and Business Ownership Data<\/span><\/td>\nEmployment details, including work history, education, training, and participation in activities such as employment type, occupation, rank, position, duties, expertise, scope of responsibility, workplace, job tenure, organizational tenure, job function, job nature, work permit status, various professional licenses, reference person data, emergency contact person data, tax identification number, history of holding positions, work history, salary data, salary certificates, remuneration, length of service, start date, resignation date, work performance evaluation results, competence, skills, understanding of characteristics, aptitude, and potential, welfare and benefits, property in the possession of employees, work results, employee discipline (e.g., list of offending employees, employee disciplinary records, records of complaints from third parties), bank account number, educational institution, educational qualification, academic results, graduation date, learning and training history (e.g., certificates, training courses attended, training results, evaluation results of teaching), brief qualification history, language proficiency, computer skills, abilities, workplace entry\/exit data, work time entry\/exit data, shareholding proportion, and\/or any other data on documents to confirm business operation (e.g., business premises lease agreement), commercial registration certificate, etc.<\/span><\/td>\n<\/tr>\n
Insurance Policy Data<\/span><\/td>\nDetails about insurance policies, such as insurer, insured, beneficiary, policy number, policy type, coverage limit, claim information, etc.<\/span><\/td>\n<\/tr>\n
Social Relationship Data<\/span><\/td>\nData Subject\u2019s social relationship data, such as political status, holding political office, data on being a stakeholder in business conducted with the Company, family relationship data (e.g., parents, children, beneficiaries of various welfare benefits, emergency contacts, references).<\/span><\/td>\n<\/tr>\n
Service Usage Data<\/span><\/td>\nDetails about products or Services, such as username, password, PIN number, OTP code, computer traffic data, location data, photographs, videos, audio recordings, usage behavior data, search history, cookies or similar technologies, device number, device type, connection details, browser data, visited website history, access duration, language used, operating system used, etc.<\/span><\/td>\n<\/tr>\n
Financial and Transactional Data<\/span><\/td>\nData related to finances, financial status, or financial history, such as credit card number, bank account number, transaction history, loan repayment history, loan application data, supporting loan application data, approved credit limit, outstanding debt, transaction details and purpose of transaction, transaction reference number, transaction channels, payment history, income data, sources of income and expenses, data on salary certificates, payslips\/bonus slips, or other proof of income, bank account statements, tax identification number, tax payment data, income tax returns, income statements, utility payment data, asset data, asset appraisal value, collateral data and documents proving collateral ownership, subscription data for channels, products, and\/or Services, credit score data, credit bureau check results, provident fund data, power of attorney, etc.<\/span><\/td>\n<\/tr>\n
Vehicle Data<\/span><\/td>\nDetailed information about vehicles and registration, such as vehicle registration number, engine number, vehicle registration data, GPS system data, etc.<\/span><\/td>\n<\/tr>\n
Technical Data, Devices, or Tools<\/span><\/td>\nApplication usage data, computer identification number, mobile phone identification number, cookies, device ID, machine identification number, universally unique identifier, tokens, symbols used in information technology systems for identification or access to various systems, model and type of device, network, connection data, access data, single sign-on (SSO) login data, logs, login data, access duration, usage and duration of application and website usage, search history, browsing data, time zone values, and location, browser plugin types and versions, operating systems and platforms, including other technologies on devices used by the Data Subject to access the platform, other technical data from platform and system usage.<\/span><\/td>\n<\/tr>\n
Sensitive Data<\/span><\/td>\nSensitive Data such as race, religious data, disability data, political opinion data, criminal records, biometric data (e.g., facial recognition data, fingerprint data), health data, etc.<\/span><\/td>\n<\/tr>\n
Other Personal Data<\/span><\/td>\nSuch as opinions, preferences, hobbies, marketing statistical analysis data of the Data Subject, requests for various rights, survey evaluation results, audio recordings, photographs, CCTV video data, telephone or electronic device conversations and communication data, registration data for bank activities, police reports, incident scene photos, etc.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
2.2 Principles for Personal Data Collection<\/span><\/h5>\n

1) The Company will only collect Personal Data that is necessary for its operations. The Company may have different purposes for Processing Personal Data depending on the case, such as:<\/span><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
No.<\/span><\/th>\nPurpose<\/span><\/th>\nDetails<\/span><\/th>\nLegal Basis<\/span><\/th>\n<\/tr>\n
1<\/span><\/td>\nTo act on the Data Subject’s request prior to entering into a contract and for the performance of a contract between the Company and the Data Subject<\/span><\/td>\nThe use of Personal Data for the necessity of accessing Services or entering into a contract between the Data Subject and the Company, such as: <\/span><\/p>\n
    \n
  • Providing consultation, advice, and\/or any other information related to products and Services, analyzing and evaluating customer needs.<\/li>\n
  • Credit consideration and entering into car rental or hire-purchase contracts, and other Company products.<\/li>\n
  • Entering into service agreements.<\/li>\n<\/ul>\n<\/td>\n
\n
    \n
  • Performance of Contract<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
2<\/span><\/td>\nTo verify identity or investigate to ascertain facts about an individual<\/span><\/td>\nVerifying the Data Subject’s identity before providing Services or entering into a contract by methods prescribed by the Company, or verifying identity for transactions, checking qualifications, status, accuracy of related data or documents, proving and confirming identity, including the Know Your Customer (KYC) process and fact-checking about customers and related individuals, as well as verifying that a signature belongs to the actual Data Subject, checking credit information, and\/or requesting correction of credit information, checking for receivership or bankruptcy status, customer risk classification.<\/span><\/td>\n <\/p>\n
    \n
  • Performance of Contract<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
3<\/span><\/td>\nTo respond to customer inquiries and provide assistance<\/span><\/td>\nProviding assistance to customers related to Services, such as providing information about updating customer data, service payments, debt payment history, or submitting requests for rights or various complaints. <\/span><\/td>\n\n
    \n
  • Performance of Contract<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
4<\/span><\/td>\nTo provide information about products, services, or marketing promotions<\/span><\/td>\nOffering or presenting products or Services, organizing marketing activities, sales promotions, special offers, recommendations, news, promotions, special privileges, benefits, and promotions by the Company to customers, including offering or presenting products or Services by group companies, affiliated companies, as well as business partners through contact channels received from customers, such as direct contact, contact via email, sending messages, and\/or contact via telephone.<\/span><\/td>\n\n
    \n
  • Consent<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
5<\/span><\/td>\nTo develop and improve products and Services<\/span><\/td>\nResearching, analyzing, testing, developing, and improving products or Services, service channels such as systems, portals\/websites, etc., communications, public relations, sales promotion activities, and marketing activities of the Company, including affiliated companies and group companies, to be better and more suitable for customer needs.<\/span><\/td>\n\n
    \n
  • Consent<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
6<\/span><\/td>\nTo contact, communicate, and deliver documents<\/span><\/td>\nContacting, communicating, sending news, organizing meetings, organizing activities, delivering various documents or letters, managing responses to communications where the Data Subject contacts the Company, preparing media and advertising materials such as invitation letters to meetings, business operation reports, and others such as to answer questions, respond to the exercise of rights, or provide various opinions.<\/span><\/td>\n\n
    \n
  • Performance of Contract<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
7<\/span><\/td>\nFor data analysis<\/span><\/td>\nAnalyzing data and preparing statistical data for various benefits under lawful purposes, such as internal organizational risk management, fraud prevention.<\/span><\/td>\n\n
    \n
  • Consent<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
8<\/span><\/td>\nTo inspect and improve information technology systems<\/span><\/td>\nInspecting and improving the organization’s information technology systems to comply with international standards and related regulations, such as system security maintenance, information technology system audits, penetration testing.<\/span><\/td>\n\n
    \n
  • Legitimate Interests<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
9<\/span><\/td>\nTo investigate and prevent unlawful acts<\/span><\/td>\nInvestigating and taking any actions to prevent offenses under relevant laws, including security breaches affecting the Company and the Data Subject.<\/span><\/td>\n\n
    \n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
10<\/span><\/td>\nTo comply with laws related to the Company<\/span><\/td>\nComplying with laws applicable to the Company’s business operations, such as complying with regulatory requirements, data storage for withholding tax purposes, customer due diligence as part of anti-money laundering law compliance, operations under credit information business law, debt collection law, consumer protection law.<\/span><\/td>\n\n
    \n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
11<\/span><\/td>\nTo comply with court orders, regulatory agencies, or government agencies, or upon request by government agencies<\/span><\/td>\nComplying with laws and orders from courts, regulatory agencies, government agencies that the Company is required to comply with both in Thailand and abroad, including announcements and regulations issued under such laws, whether currently in force, to be amended, or to arise in the future, and\/or for public benefit, including submitting and explaining data to law enforcement agencies or authorized government officials, or state organizations that may be involved in business operations, such as the National Anti-Corruption Commission, Royal Thai Police, Anti-Money Laundering Office, Bank of Thailand.<\/span><\/td>\n\n
    \n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
12<\/span><\/td>\nFor the purpose of internal organizational administration<\/span><\/td>\nVarious aspects of internal organizational administration, such as recruitment and appointment of directors, board meetings, payment of director remuneration, shareholder meetings, ensuring compliance with the Company’s good corporate governance principles and business ethics of affiliated and group companies, organizational risk management, internal supervision and audit of the Company, creation, storage, and review of customer systems or databases, prevention of internal fraud and anti-bribery, handling complaints, or managing legal violations or suspicious incidents.<\/span><\/td>\n\n
    \n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
13<\/span><\/td>\nFor the purpose of human resource management<\/span><\/td>\nHuman resource management and administration of the Company, including affiliated and group companies, such as personnel recruitment, employee hiring, facilitating employment work, assigning tasks, paying salaries, remuneration, and bonuses to employees and trainees, providing welfare benefits, evaluating work performance, competence, skills, understanding of characteristics, aptitude, or potential of employees, monitoring employee performance, timekeeping, leave requests, appointments, transfers, position changes, organizational restructuring, providing insurance for employees, operations related to the Social Security Office, personal income tax payments, withholding tax, skill development, labor relations, prevention of contagious diseases and epidemics, compliance with occupational safety, health, and environment laws, operations under partnership and company laws. <\/span><\/td>\n\n
    \n
  • Performance of Contract<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n
  • Legal Obligations<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
14<\/span><\/td>\nFor the purpose of the Company’s transactions<\/span><\/td>\nThe Company’s transactions related to business operations, such as asset buying and selling, procurement, sourcing funding for business operations both domestically and internationally, securitization, issuing legal debt instruments, business transfer.<\/span><\/td>\n\n
    \n
  • Performance of Contract<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
15<\/span><\/td>\nFor the purpose of establishing legal rights and litigation<\/span><\/td>\nDispute resolution and legal proceedings, lawsuits, as well as acting on court summons, court orders, or arbitral awards.<\/span><\/td>\n\n
    \n
  • Performance of Contract<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
16<\/span><\/td>\nFor the purpose of debt collection<\/span><\/td>\nContacting for debt collection, debt restructuring, asset tracing and seizure, tracking assets obtained by customers from the Company’s Services and regaining possession of the Company’s assets, debt sale and transfer of customer history to debt buyers, including reclaiming money, and conducting auction processes.<\/span><\/td>\n\n
    \n
  • Performance of Contract<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
17<\/span><\/td>\nTo protect life, body, and property health and safety<\/span><\/td>\nTo protect the health and safety of life, body, and property of the Data Subject, the Company, or other individuals, such as installing CCTV cameras to prevent intrusion, property damage, committing crimes in the area, as well as supporting law enforcement agencies in investigating crimes, processes related to whistleblowing, collecting relevant evidence, and supporting the establishment of rights or raising defenses in legal proceedings.<\/span><\/td>\n\n
    \n
  • Vital Interest<\/span><\/li>\n
  • Performance of Contract<\/span><\/li>\n
  • Legitimate Interests<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
18<\/span><\/td>\nFor the purpose of Processing Sensitive Data<\/span><\/td>\nTo collect, use, and\/or disclose Sensitive Data for which the Company cannot rely on other legal bases, such as considering job applications for employment, checking qualifications, checking personnel criminal records, considering approval of leave for religious ceremonies, managing welfare for disabled persons, managing health welfare, identity verification, timekeeping, attending meetings, or accessing work areas.<\/span><\/td>\n\n