PRIVACY POLICY
WHO WE ARE
FIS CAPITAL COMPANY LIMITED
- INTRODUCTION
- FIS CAPITAL Company Limited (“FISC” or “we”) has established and discloses this privacy policy statement (The “Privacy Policy Statement”) as our approach to explain how we, as the data controller, collect, use, disclose or otherwise process personal information of our existing customers and prospect customers, and how we protect personal information and properly handle such information once the provisions under the Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”) with respect to the processing of personal information become effective.
- FISC recognizes the importance of protecting personal information and complies with the PDPA and other relevant laws and regulations as well as internal regulations of FISC including this Privacy Policy Statement, and FISC strives to properly protect and handle personal information.
- FISC collects personal information through appropriate and lawful means, and only to the extent necessary to achieve the purpose of utilization. Such collection, use, disclosure or otherwise processing of personal data will be in accordance with the provisions of relevant laws only.
- FISC specifies the purpose of collection, use, disclosure or otherwise processing of personal information, and collects such information to the extent necessary in relation to the purpose. In cases where the purpose of collection, use, disclosure or otherwise processing of specific personal information is limited by relevant laws and regulations, FISC does not use such personal information beyond such limitations of the purpose. You may find details of the purpose of collection, use, disclosure or otherwise processing of personal information in this Privacy Policy Statement.
- FISC does not disclose personal information to any third party, except where the person concerned has granted prior consent in that regard, or where disclosure of personal information is based on laws.
- FISC takes appropriate security measures for preventing unauthorized or unlawful loss, access to, use, alteration correction, or disclosure, of personal information. When appointing any third party to process personal information on behalf of FISC, FISC appropriately oversees such a third party.
- FISC reviews the content of this Privacy Policy Statement as necessary and strives to bring about continuous improvement such as to our systems and approaches for protecting personal information.
- FISC trains and educates our officers and employees regarding the importance of protecting personal information to ensure that they handle customers’ personal information in an appropriate manner.
- FISC responds in an appropriate and swift manner to requests for exercising data subject rights, any opinions or requests concerning its collection, use, disclosure or otherwise processing of personal information. Please see relevant details shown in this Privacy Policy Statement or please contact FISC at the contact details shown below.
- PERSONAL INFORMATION WE COLLECT, USE, DISCLOSE OR PROCESS AND ITS SOURCES
- What is Personal Information?
Personal Information means any information relating to an individual, which enables the identification of such individual, whether directly or indirectly.
- Personal Information we collect, use, disclose or process.
FISC collects several types of personal information, including:
– Identity data (e.g. name, surname, identification card number, passport number, birthdate, gender, nationality, marital status, online identity (e.g., IP address, cookie, device ID), and in some cases FIS CAPITAL may process sensitive data such as biometric data for face recognition only with your explicit consent or when permitted by law)
– Contact data (e.g. address, telephone number, email)
– Transaction data (e.g. credit card number, member card number, income information, financial statement, data of transaction via FISC products or services, credit history, debt payment history, asset information)
– Communication data (e.g. images, video, or voice recordings when communicating with us)
- Sources of Information
FISC may collect your personal information from various sources as follows:
(1) Collect information directly from you, for example:
– Procedures for applications for using our services, contract signing, form filling, questionnaires, registrations or submission of claims or requests.
– Your communication with us via our contact channels, e.g., telephone, e-mail, etc.
– Automatic system, e.g., when you use our website or application, etc.
(2) Collect information from other sources, for example:
– Our customers, agents, or service providers
– Our group companies or our business partners
– Government authorities or other publicly available sources, such as company websites, information made available on the internet or social media platforms (e.g., Facebook, LinkedIn, etc.)
- PURPOSES OF COLLECTION, USE, DISCLOSURE OR PROCESSING OF PERSONAL INFORMATION
– Our customers, agents, or service providers
We will use your data for the purpose of developing and improving the website http://www.fis-capital.com online platforms, and other social media channels within the group. Additionally, we will analyze and process personal data to enhance the efficiency of our electronic services to better meet user needs.
– Our customers, agents, or service providers
If there are changes in the purposes for data collection, we will inform you and seek your consent, maintaining a record of any modifications as evidence. We will not collect, use, or disclose your personal data for purposes other than those previously communicated to you during or before data collection.
- DATA RETENTION PERIOD
FISC retains your personal information for as long as is considered necessary for the purpose for which it was collected, used, disclosed, or processed as set out in this Privacy Policy Statement. The criteria used to determine our retention periods include: (i) we retain the personal information for the duration we have an ongoing relationship with you and provide the service to you; or (ii) we may retain the personal information for a longer period as necessary to comply with applicable laws, or to be in accordance with legal prescription, or to establish, comply with or exercise the rights to legal claims or defend against the rights to legal claims, or to be complied with, for any other cause, our internal policies and regulations.
- DATA DISCLOSURE
FISC may disclose your personal information in certain circumstances, for the purposes set out in this Privacy Policy Statement, to:
- Our subsidiaries, affiliates and any related companies for business purposes, internal management, offering for services which you may be interested in, including undertaking any other activity as set out in this Privacy Policy Statement.
- Government authorities, supervising authorities or other authorities as stipulated by laws, including competent official, e.g., courts, police officers, Securities and Exchange Commission, Bank of Thailand, Anti-Money Laundering Office, Revenue Department.
- Agencies, contractors/sub-contractors and/or service providers for their implementation and procedure, such as
– Carriers, providers of card issuing or destruction, document storage and destruction service providers, printing house, marketing agency, research companies, IT development companies
– Debt collection service provider (in the case where FISC assigns such debt collection service provider for trace and collection procedure and/or legal execution)
– National Credit Bureau Company Limited.
– Auditors, lawyers, legal advisers, and consultants
- Assignees of FISC ’s rights, duties and benefits, including their attorneys, for example in case of corporate restructuring, merger, acquisition, sale of assets, debt transferring or selling, securitization, etc.
- Co-branded partners and business partners of FISC or other third parties as per your consent or contractual requirements or legal requirements, as the case may be.
- DATA SUBJECT RIGHTS
- Your rights under the PDPA
According to the PDPA, you have certain rights relating to your personal information as follows:
(1) Right to Withdraw Consent
You have the right to withdraw consent given to us for collecting, using or disclosing your personal information at any time, unless there is a restriction of the withdrawal of consent by law or the contract which gives benefits to you.
However, the withdrawal of consent shall not affect the collection, use or disclosure of personal information you have already given consent legally. In addition, when you withdraw consent, you may experience less convenience in using our products or services or may not receive our benefits or special offers.
(2) Right to Access
You have the right to request access to and obtain a copy of your personal information, which is under our responsibility, or to request the disclosure of the acquisition of the personal information obtained without your consent. At our discretion, we may require you to prove your identity before providing the requested information. If you require multiple copies of your personal information, we may charge a reasonable processing fee.
(3) Right to Data Portability
FISC arranges your personal information to be in the format which is readable or commonly used by ways of automatic tools or equipment, and can be used or disclosed by automated means, you have the right to receive your personal information and are also entitled to:
(a) request us to send or transfer your personal information in such formats to other data controllers if it can be done by the automatic means;
(b) request to directly obtain your personal information in such formats that we send or transfer to other data controllers unless it is impossible to do so because of the technical circumstances.
(4) Right to Object
You have the right to object to the collection, use, disclosure or otherwise processing of your personal information for direct marketing purposes or on grounds stipulated by law. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process your personal information for the establishment, exercise, or defense of a legal claim.
(5) Right to Erasure
You have the right to request FISC to erase, destroy or make your personal information become unidentifiable data, under certain circumstances unless we are required to retain your personal information to comply with a legal obligation or to establish, exercise or defend legal claims.
(6) Right to Restriction of Processing
You have the right to request FISC to restrict the use of your personal information under certain circumstances where you believe such personal information to be inaccurate, our processing is unlawful; or we no longer need to process such personal information for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not want us to delete it.
(7) Right to Rectification
FISC will ensure that your personal information remains accurate, up-to-date, complete, and not misleading. However, if you consider that your personal information is inaccurate or changed, you have the right to request FISC to rectify your personal information to be accurate, up-to-date, complete, and not misleading.
- How to exercise your rights
You may exercise the data subject rights listed above via the following channels:
– Privacy setting page (via this website)
Cookie Settings in Chrome
Cookie Settings in Safari and iOS
Cookie Settings in Microsoft Edge
Cookie Settings in Firefox
– Other channels as specified in Clause 8 below for your right Nonetheless, if we reject your request, we will inform you of the reasons.
- Processing time
FISC will process your request within 30 days upon receival of your valid request together with complete supporting documents. Until then, your personal information will still be unchanged in our database and may still be processed or you may be contacted by us, our partners or those who have retained your personal information as of the date of your request.
- DATA PROTECTION SECURITY MEASURES
- Implementation of Security Measures
FISC implements appropriate security measures for preventing unauthorized or unlawful loss, access to, use, alteration, correction, or disclosure of personal information.
- Disclosure of Personal Information to Data Processor
FISC properly supervises third parties to which FISC has appointed to process personal information pursuant to our orders or on our behalf.
- CONTACT INFORMATION
If you have any questions or inquiries about the protection of your personal information, collection, use or disclosure of your personal information, or exercise of your rights, or have any claims, please contact us at:
E-mail : contact@fis-capital.com
Business hours : Monday to Friday, 09:00 AM to 05:00 PM.
Contact Address : FIS CAPITAL Company Limited 548 One City Centre, 37th floors, Ploenchit Road, Lumpini, Pathumwan, Bangkok 10330
You also have the right to file a complaint with the relevant Personal Data Protection Committee if FISC violates or does not comply with the PDPA or other regulations or notifications issued in accordance with the PDPA.
- THIRD PARTY LINKS
This Privacy Policy Statement applies to the sales of products or provision of services and use of the website of FISC only. When you link to third party websites via FISC Website, the personal information protection shall be in accordance with the privacy policy statement of such third-party websites which are not related to FISC.
- UPDATE TO THIS PRIVACY POLICY STATEMENT
FISC regularly reviews and, if appropriate, updates this Privacy Policy Statement from time to time to ensure that your personal information is properly protected. In case of any update to this Privacy Policy Statement, FISC will inform you through Privacy Policy Statement on this website or other appropriate methods. Please refer to this page for the updated Privacy Policy Statement.