The protection of your personal information, e.g. when you visit our website, when you contact us and when you enter into a contractual relationship with us regarding our services is of the utmost importance to us.

Below you will find information on what data we collect when you visit our homepage, when you fill out our web forms or use other functions on our website, and how and for what purpose we process this data. We collect, process and use personal information only in accordance with the following principles and in compliance with the applicable legal provisions on data protection, especially the Personal Data Protection Act B.E. 2562 (2019), in the following: “PDPA”.

Questions about privacy in connection with our website and the services offered through our website can be directed to us using the contact information in section 1, directly below.

Responsible party and data protection officer

This privacy information applies to the data being processed by:

Chiang Mai Lanna Business Services Ltd.

Address: Airport Business Park Building C 92/1 Mahidol Road, Tambon Haiya Amphur Muang, Chiang Mai 50100

Email: info@clbs.co.th

Phone: +66 53 90 47 48 (hereinafter also referred as “CLBS” or “we”).

You can contact data protection officer here:

Email: dataprivacy@clbs.co.th

Collection and storage of personal data and the nature and intended use

While visiting our website

When you visit our website, the browser used on your end device automatically transmits information to the server of our platform. This information is temporarily stored in a so-called log file. The following information is recorded without requiring any action on your part:

  • the IP address of the requesting end device,
  • the date and time of access,
  • the name and URL of the retrieved file,
  • the website from which access is made (so-called referrer URL),
  • the browser used and, if necessary, the operating system of your computer and the name of your Internet access provider.

The above-listed data will be processed by us for the following purposes:

  • to ensure a smooth connection of the website,
  • to guarantee a user-friendly experience of our website,
  • to evaluate system safety and stability,
  • for other administrative purposes.

The data is stored in server log files in a format that allows the identification of the persons concerned, for a maximum period of 14 days, unless a security-relevant event occurs (e.g. a DDoS attack). When a security-relevant event occurs, server log files are stored until the security-relevant event has been eliminated and fully resolved.

The legal basis for data processing is our legitimate interest, which results from the above listed purposes for data collection. Under no circumstances will we use the data collected for the purpose of drawing conclusions about your person. The provision of this data is not required by law or contract or necessary for the conclusion of a contract. You are not obligated to provide us with any personal information. If you choose to not provide such information, it will not be possible to access our website.

Furthermore, we use cookies and analytical services when you visit our website. You can find further information on this below.

When contacting us

We offer you the option of contacting us by clicking on "Contact" at the bottom of our website. You will need to provide us with your name, email address, telephone number and information about your education, language-level and work-experience. Your birthday and further application documents may be provided/uploaded voluntarily.

You also can send us an email to info@clbs.co.th using your preferred email server. When doing so, it is necessary to provide your name, a valid email address and a description of your problem so that we know who the request comes from and can appropriately address it. Additional information e.g. as in the application form may be provided voluntarily.

In the event that your enquiry concerns a contract to which you are a contractual party, or concerns the implementation of pre-contractual actions, the data processing will be carried out in accordance with Section 24 (3) PDPA. For all other inquiries, data processing for the purpose of establishing contact is based on a balance of interests (Section 24 (5) PDPA). In this case our legitimate interest is the processing of your request.

If you are interested in our job-offers we store your information in order to find a suitable offer for you or to be able to send you such offers in the future based on the interests you have expressed.

You can find more information about applicant data protection at CLBS here.

The personal information collected by us in the course of contacting you will be deleted in accordance with the legal requirements after the inquiry you have made has been completed.

Information Disclosure

We have entered into data processing agreements with technical service providers which we use for the operation and maintenance of our website, as well as with the providers of tracking and web analysis tools listed in sections 2, 5 and 6 of this privacy policy, who process the data on our behalf for the purposes of user analysis and statistical evaluation.

Service providers who process personal information on our behalf in foreign countries will only be used if the destination country or international organization that receives such Personal Data has an adequate data protection standard or one of the exceptions mentioned in Section 28 PDPA applies.

Beyond that, we do not transfer or share your personal information with third parties, except for the purposes listed below. We will only disclose your personal information to third parties if the following is applicable:

  • you have provided your explicit consent,
  • the disclosure of information is necessary to protect our legitimate interests or the legitimate interests of a third party and there is no reason to assume that you have an interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for disclosure, and
  • a disclosure is legally permissible and required for the processing of contractual relationships.

Cookies

Please be advised that when you visit our website, we store information on your end device using cookies (please see our Cookie-Policy). Cookies are small files that are transferred to your browser from an Internet server and stored on your hard drive. Information is stored in the cookie, which occurs in connection with the respective end device. This does not mean that we obtain direct knowledge of your identity. We use the term "cookies" in these guidelines for all files that collect data in this way.

The use of cookies enables us to make the use of our services more enjoyable for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted when you leave our website. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our website the next time, we will automatically recognize that you have already visited our website, and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to record the use of our website statistically and to evaluate this for the purpose of optimizing our offer for you (see section 5 "Analysis Tools"). These cookies enable us to automatically recognize that you have already visited us when you return to our website. We also use cookies for retargeting purposes (see section 6 "Marketing"). These cookies are automatically deleted after a specific time period.

When you visit our website, we ask for your consent (Section 24 PDPA) to the use of all cookies that are not absolutely necessary for the provision of our website. You can also visit our website without accepting cookies. Our Cookie-Policy provides detailed information about the cookies we use and you will be able to manage your cookie settings and choose for which cookies you give us your consent.

If you do not want your end device to be recognized during your next website visit, you can refuse the use of cookies by changing the settings in your browser to "reject cookies". You will find the respective procedure in the operating instructions of your browser. If you refuse the use of cookies, you may experience limitations in the use of some areas of our website.

Analytical Tools

The tracking procedures listed below and used by us are carried out on the basis of the consent you have provided voluntarily. With the tracking procedures we use, we want to ensure that our platform is designed to meet your needs and is continuously optimized. Furthermore, we want to ensure that we can provide you with personalized recommendations based on your user behavior. We also use the tracking procedures to record the use of our website statistically and to optimize our offers for you. The provision of this information is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obligated to provide this personal information.

The respective data processing purposes and categories of data can be found in the information on the corresponding tracking tools.

Use of Google Analytics in combination with anonymization function

For the purpose of designing our platform to meet the needs of our customers and continuously optimizing it, we use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google"). In this context, pseudonymized user profiles are created and cookies are used.

The information generated by the cookie about your use of this platform, such as

  • browser type/version,
  • the operating system used,
  • referrer URL (the previously visited page),
  • host name of the accessing computer (IP address),
  • time of the server request,

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the platform, compile reports on the platform activities and provide additional services connected with the use of the platform and the internet for the purposes of market research and the design of this platform in line with the requirements. This information may also be transferred to third parties if this is required by law or if third parties process this information on our behalf. Under no circumstances will your IP address be merged with other Google data. IP addresses are made anonymous so that an assignment is not possible (IP masking). This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before.

You can prevent the installation of cookies by means of a corresponding setting in the browser software; however, we would like to point out that not all functions of this platform can be used to their full extent in this case. You can also prevent the collection of data generated by the cookie and related to your use of the platform (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on.

Further information on data protection in connection with Google Analytics can be found on Google Analytics Help.

We also use Google Analytics to evaluate data from AdWords and the double-click cookie for statistical purposes. You can deactivate this in the Ads Preferences Manager if you prefer.

Google Tag Manager

We use Google Tag Manager, an application that allows us to manage website tags from a single interface. Tags are small pieces of code on our website that are used, to measure visitor traffic and behavior, measure the impact of online advertising and social channels, use remarketing and targeting, and test and optimize our website among other things. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. The tool triggers other tags that can collect data on their own. Google Tag Manager does not access this data.

Facebook Pixel

We are operating retargeting via Facebook pixel.

For retargeting we use Facebook pixel of Facebook Inc. (1 Hacker Way, Menlo Park, CA 94025, USA) or if you are located in the EU, Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) ("Facebook"). For the United States, the European Commission has issued an adequacy decision (EU/US Privacy Shield) according to which Facebook is certified.

The purpose of Facebook Pixel is to present interest-based ads to visitors of the website within the social network Facebook or when visiting websites that participate in the Facebook advertising network, based on information about their use of this website ("Facebook Ads").

Facebook Pixel is a program code implemented on this website. When you access the website, the program code can trigger the storage of certain details on your end device in the form of cookies, as well the transmission of certain information to Facebook. This includes information that is generated when you access the website via hypertext transfer protocol (HTTP) for technical reasons, for example your IP address. This may also include other information that is already stored in cookies on your device, such as your Facebook user-ID. Therefore, when you visit the website, Facebook recognizes that you have visited this website previously, as well as the type of website content you have accessed. If you have a user account with Facebook, Facebook may associate this information with your user account.

If you do not want Facebook to associate the collected information with your Facebook user account, you can disable the remarketing feature here. To do so, you must be logged in to Facebook. You can also disable cookies in your browser or device settings. You can also make appropriate settings in our Cookie-Policy (see section 4).

You can find additional information on how to protect your privacy on Facebook here in the Facebook privacy policy. More specifically, what content and information you have shared through your use of Facebook can be managed through the "Activity Log" tool or can be downloaded from Facebook via the "Download Your Information" tool.

Facebook Fan Page

We operate a so-called Facebook Fanpage („Fanpage“) with the social network Facebook. When you visit our Fan Page, your personal data is processed not only by us but also by Facebook. This is the case even if you do not have a Facebook profile. Facebook and our company are jointly responsible for this data processing in accordance with Section 29 PDPA. The agreement on joint responsibility can be found here.

Facebook uses cookies to improve your user experience during your visit to our Fan Page. For this purpose, Facebook creates user profiles based on your preferences and interests, and displays personalized advertising (both within or outside of Facebook). You can delete these cookies in your browser at any time or refuse to set cookies via your browser or device settings.

If you have a Facebook profile and visit our Fan Page while you are logged in, only the information displayed on your public Facebook profile will be visible to us as the operator of the Fan Page. In addition, Facebook provides us with anonymous usage statistics that we use to improve your user experience when visiting our Fan Page. We do not have access to the data that Facebook collects to generate these statistics. Facebook has committed itself to fulfil all obligations under the PDPA with regards to this data.

If you use our Fan Page to contact us (e.g. by making your own contributions, responding to one of our contributions or by sending us private messages), the information you provide us with will be processed solely for the purpose of contacting you.

The legal basis for the data processing is Section 24 (5) PDPA. Our legitimate interest lies in Improving your user experience when visiting our Page.

You are not obligated to provide us with your personal information. Omitting person information may result in individual functionalities of our Fan Page not being available to you or only available to a limited extent.

For details about the processing of your personal information and the type, scope and purpose of its use by Facebook, please refer to the Facebook Privacy Policy.

Security

On our website we use the common TLS (Transport Layer Security) procedure in connection with an encryption level that corresponds to the respective state-of-the-art technology. The actual level of encryption also depends on the browser you use. You can determine whether an individual page of our website is being transmitted in encrypted form by the key or lock symbol in the lower status bar of your browser.

We have also taken technical and administrative security precautions to protect your personal information against loss, destruction, manipulation and unauthorized access. All our employees as well as service providers working for us are subject to the valid data protection laws. Our security precautions are subject to a continuous improvement process and our data protection declarations are constantly revised. Please make sure that you have the latest version.

Rights of the individuals affected

You have the following rights:

  • to request information about your personal information processed by us;
  • to immediately demand the correction of incorrect or incomplete personal information stored by us;
  • to request the deletion of your personal information stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (if we have published your personal information, we are obligated, taking into account the available technology and implementation costs, to take reasonable measures, including technical measures, to inform the data controllers who process the personal data that you have requested the deletion of all links or of copies or replications of such personal information)
  • to demand the restriction of the processing of your personal information if the accuracy of such information is disputed by you, if the processing is unlawful but you refuse to have it deleted and we no longer need the information, but in the case when you need the data for the assertion, exercise or defense of legal claims or have filed an objection to the processing
  • to receive the personal information that you have provided to us in a structured, common and machine-readable format or to request its transfer to another responsible party;
  • to revoke your consent towards us at any time. As a result, we are no longer allowed to continue the data processing that was based on this consent in the future and
  • to complain to a regulatory agency. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our registered office.

Right to Appeal

If your personal information is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data for reasons relating to your particular situation or direct marketing. In the latter case, you have a general right to appeal, which will be implemented by us without indicating any specific circumstances.

If you wish to make use of your right to cancel or to appeal you can simply send an email to dataprivacy@clbs.co.th.

Applicant Data Protection

If you want to become a member of the CLBS team, your personal data transmitted in the context of this will of course be subject to special data protection regulations. You can find out how we handle these data here.

Privacy Policy Updates

This privacy policy represents the current status.

Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to amend this privacy statement. The current privacy statement can be accessed and printed out at any time by clicking here.

Updated: 15.12.2020