Privacy Policy

We ,University of the Thai Chamber of Commerce , take your privacy seriously. When we use your personal information to conduct our business and provide services to you, your personal information will be protected under the Personal Data Protection Act B.E. 2562.

As a data protection controller, we are legally required to inform you of this Privacy Policy, which explains how we collect, use or disclose your personal data and your rights as a data subject, and we confirm that we have taken action in accordance with this law to protect your personal data.

1. Definition of Personal Data

“Personal data” means information about an individual which enables that individual to be identified, either directly or indirectly, but does not include information specifically about a deceased person.

“Sensitive personal data” means data that requires special care in its collection or processing, such as race, political opinions, religious beliefs, sexual orientation, and biometric data. Sensitive data is protected more strictly by law than ordinary personal data.

2. Personal information we collect from you

We collect your information when:

You have visited our website.
You provide us with information through the website or application.
You provide us with information through our online contact channels or through normal channels.

We collect and process your personal data only as necessary to provide our services to you, to enable you to contact us and to carry out our educational services in a way that you can expect us to use your personal data for. The personal data we process can be categorized as follows:

Contact Data	This includes information such as name, address, email, phone number, school graduated from, academic qualifications, academic results, language test results, faculty of interest, reasons for applying, and the need for educational loan services.
Technical Data	This includes information such as your computer’s IP address, browser type, time zone settings, location, operating system, platform and technology of the device used to access the website.
Usage Data	This includes information such as the pages you visited before you entered the Platform, the pages you visit, the amount of time you spend viewing the pages, the products or information you search for on the Platform, the time and date of your visit to the Website, and click-through data.
Communication Data	This includes information such as emails, chat logs, and communication data between university officials and the personal data owner.
Data used as evidence for identity verification (Identity-verification Data)	This includes information such as national identification number, address, date of birth, and gender.
Sensitive personal data	Including race, religious beliefs

3. Source of personal data

3.1 For students who expect to apply to study with us (Prospective Students)

We collect your information when:

You have visited our website.
You provide us with information through the website or application.
You provide us with information through our online contact channels or through normal channels.
You provided us with information through a questionnaire from the university’s public relations activities.
You provide us with information through the Office of Student Recruitment’s activities.
You provide us with information through agents who provide educational advisory services both domestically and internationally.

3.2 For current students (Existing Students)

We collect your information when:

You are registered as a student at the University of the Thai Chamber of Commerce.
If you are an international student, you provide information through a university representative in your country or through an educational advisory service provider.
You have visited our website.
You provide us with information through the website or application.

3.3 For general public

We obtain personal data directly from you through the following channels:

You register by creating an account via the website or application.
You contact us to obtain information about our courses and educational services.
You make an appointment to inquire about our courses and educational services.
You provide us with information when you contact one of our agencies.
You participate in our promotional activities via electronic channels, social networks or normal channels.

3.4 Your personal information that we receive from third parties

Your personal data that we receive from third parties who collect, use or disclose personal data at our instructions or on our behalf, where your personal data will not be used other than for the purposes specified or instructed by us, and we require such third parties to maintain the confidentiality and protection of your personal data in accordance with the standards of the Thai Personal Data Protection Law.

3.5 Personal information obtained from cookies

When you visit our website, personal information obtained from cookies helps us to provide you with a better, faster, safer and more private service when you use the Services and/or access the Platform.

4. Purpose of collecting, using and disclosing personal information

University of the Thai Chamber of Commerce is a university licensed as a private higher education institution, established under the Private Higher Education Institution Act B.E. 2546 (2003). Its objectives are to provide education, promote academic and higher vocational studies, conduct teaching, conduct research, provide academic services to society, and preserve national arts and culture. In carrying out these objectives, we use your personal data only as necessary and within the scope of data protection laws. We have a lawful basis of processing your personal data as specified in the Personal Data Protection Act B.E. 2562 as follows:

It is necessary for the performance of duties in carrying out missions for the public benefit because the operation of the university as a private higher education institution is considered a public service in which the government has allowed the private sector to manage education on behalf of the state (Announcement of the Higher Education Commission on the Guide to Applying for a License to Establish a Private Higher Education Institution, 2015).
It is necessary for the University’s legitimate interests (Legitimate Interests) or the legitimate interests of a third party or your legitimate interests, without impairing your fundamental rights over your personal data.
It is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
To comply with the University’s laws or to prevent or suppress danger to the life, body or health of an individual.
To achieve research or statistical purposes for which appropriate safeguards have been put in place to protect the rights and freedoms of data subjects.

We have summarized our use of your personal data to provide our services to you and explained the legitimate data processing bases we use to process your personal data for each activity in the table below.

Objective	Data types	Legitimate basis for processing personal data
1. For students who are expected to apply to study with us (Prospective Students)
1.1 To contact you to answer questions and provide advice on university education information, faculty information, departments, and activities related to higher education.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest, as the operation of the university as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government. 2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.
1.2 To organize public relations activities and provide advice on studying at university to high school students.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest, as the operation of the university as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the state. 2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.
2. For current students (Existing Students)
2.1 To manage registration and process student requests related to registration and manage education, such as course registration, course withdrawal-exchange, graduation, degree approval, etc.	– Contact information – Communication information – Information used as evidence to confirm identity	It is necessary for the performance of duties in carrying out missions for the public interest because the operation of the university as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.
2.2 To carry out procedures regarding the receipt of tuition fees and fees related to studying.	– Contact information – Information used as evidence to confirm identity	It is necessary for the performance of duties in carrying out missions for the public interest because the operation of the university as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.
2.3 To organize projects or activities to promote student learning, such as joining clubs, organizing academic seminars, organizing social and community service activities, organizing job fairs, etc.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest because the operation of the university as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government. 2) For the legitimate interests of the university in organizing activities or projects that promote learning and activities that are beneficial in enhancing the experience for students.
2.4 To organize projects or activities that encourage students to do internships in real workplaces that are organizations outside the university.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest, as the operation of the university as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government. 2) For the legitimate interests of the university in organizing activities or projects that promote learning and activities that are beneficial in enhancing the experience for students.
2.5 To promote the creation of academic works and research of students, such as joint research with teachers and writing academic/research articles.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest, as the operation of the university as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government. 2) For the legitimate benefit of the university in organizing activities or projects that promote research for students. 3) To achieve research or statistical purposes for which appropriate safeguards have been provided to protect the rights and freedoms of data owners.
2.6 To compile and collect alumni information for contacting and building relationships between the university and students.	– Contact information – Communication information	For the legitimate interests of the University in fostering relationships with alumni and to publicize the University’s activities to alumni.
3. For students who are expected to apply to study with us (Prospective Students) and current students (Existing Students)
3.1 To analyze information about your use of the website in order to develop our website and to resolve technical problems that may arise when using the website.	– Contact information – Technical information	For the legitimate interests of the University in using your website usage data and statistics to develop our website services more efficiently and to improve the website to meet your needs and solve any problems arising from using the website services.
3.2 To carry out operations regarding the entry into any student loan contract or scholarship contract.	– Contact information – Information used as evidence to confirm identity	1) For the performance of a contract to which you are a party or for use in taking actions at your request prior to entering into a contract. 2) For the legitimate benefit of the University in promoting students’ access to financial resources for educational purposes.
3.3 To market to you to promote student recruitment or publicize university courses, activities or other educational services that may be of interest to you.	– Contact information	1) For the legitimate interests of the University in publicizing the University’s courses and activities to you. 2) In the event that the University wishes to conduct direct marketing to you, we will seek your explicit consent before we use your personal data for direct marketing purposes.

We may use more than one legitimate basis for processing your personal data depending on the purposes for which we process your personal data.

5. Disclosure or sharing of personal information

We may disclose or share your personal data with third parties as follows:

Affiliated entities
Online advertising platform
Marketing company or consultant
Regulatory agencies such as the Personal Data Protection Commission, Ministry of Higher Education, Science, Research and Innovation, Office of the Higher Education Commission, etc.
Business or professional consultant
The organization where students wish to intern or apply for employment

We require third parties with whom we disclose or share your personal data as described above to keep your personal data confidential and protect it in accordance with the standards set out in the Personal Data Protection Act and to use your personal data only for the purposes for which we have specified or instructed such third party to do so. Such third parties may not use your personal data other than for such purposes.

When requested, we may disclose your personal data to relevant authorities to comply with the law, such as to prevent threats to life or health, for law enforcement purposes, indictment, exercise or defend legal rights, or prevent fraud.

6. Storage and retention period of personal data

We store your personal data in our information systems and have standard security measures in place to ensure the security of our information systems and the use of your personal data by taking the following measures:

Restrict access to personal data that may be accessed by employees, agents, partners or third parties. External access to personal data will be permitted only as required or as directed, and external parties are required to maintain the confidentiality and protection of personal data.
Provide technological means to prevent unauthorized access to computer systems.
Destroy your personal data for security purposes when it is no longer required for legal or business purposes.
There is a process for handling personal data breaches or suspected cases, and personal data breaches must be reported to the Personal Data Protection Committee in accordance with the conditions stipulated by law.

Duration of retention of personal data

We retain your personal data for the period necessary to fulfill the purposes for which we provide our services and in accordance with applicable accounting standards, legal standards and other regulations.
In determining the retention period for data, we consider the amount, nature of use, purpose of service, sensitivity of personal data, and potential risk of misuse of personal data, and the periods required by applicable laws.
Your personal information obtained from cookies when you use our website will be kept for no longer than 13 months or as required by applicable laws.

7. Rights of personal data owners

As a data subject, you have the following rights to the extent permitted by law:

You have the right to withdraw your consent (Right to withdraw Consent) to the processing of your personal data, you have given us consent, for the period that your personal data is with us.
You have the right to access your personal data (Right of Access) and request that we provide you with a copy of your personal data, including requesting that we disclose the source of your personal data that you have not given us consent to.
You have the right to have your personal data corrected or filled in incomplete data (Right to Rectification).
You have the right to request that we erase your data for certain reasons (Right to Erasure)
You have the right to request that we restrict the processing of your personal data for certain reasons (Right to Restriction of Processing)
You have the right to transfer the personal data you provide to us to another data controller or to yourself for certain reasons (Right to Data Portability).
You have the right to object to the processing of your data on certain grounds (Right to Object)

You can contact the DPO/University Officer to submit a request to exercise the above rights.

8. Marketing and promotion activities

We may conduct marketing and promotional activities or have them done by third parties with whom we have agreements in the following cases:

Where we use your personal data for direct marketing purposes with you, we will only do so if you have given us your explicit consent and we have informed you of the purposes of using your data for direct marketing purposes. You can revoke your consent to direct marketing at any time through our opt-out system.
In case of participating in activities to promote student recruitment, such as gaming activities or activities on various social network channels to publicize the university’s courses and services to you, we will not process your information for direct marketing purposes unless you give us your express consent to use your personal information for direct marketing purposes. We will inform you of the purpose of using your information for direct marketing purposes, and you can revoke your consent to direct marketing at any time through our data cancellation system.

9. Cookie Policy

Cookies are text files placed on your computer that are used to store details of your internet usage logs or website browsing behavior. You can learn more about Cookies at https://www.allaboutcookies.org/.

We use Cookies to collect information about your visits to our website to help us provide you with better, faster, safer and more personalized services when you use our website. We use Cookies in the following cases:

Functionality Cookies: We use these types of Cookies to help us recognize your device or browser so that we can tailor content to your personal interests more quickly and make our Services and Platforms more convenient and useful to you. To disable these Cookies, you can set your device preferences using your browser’s or device’s Help Center.
Analytics cookies: We use Analytics cookies provided by third parties to collect information about how visitors use our website. We anonymize all visitor data and pass it on to third parties who can use it or disclose it to others who process it for their own purposes, as permitted by law. The third parties do not combine your information from our website with information they already have. You can choose to disable these cookies on our website.

10. Privacy Policy of Other Websites

This Privacy Policy applies only to our services and your use of our website. If you follow a link to another website (even through a channel on our website), you will be required to review and comply with the privacy policies that appear on that website, separate from ours.

11. Changes to the Personal Data Protection Policy

We will regularly review the effectiveness of this Privacy Policy and if we make any changes to this Privacy Policy, those changes will be posted or posted on our website or other platforms.

12. Contact channels

You may contact the University’s Data Protection Officer (DPO) to inquire about this policy, the management of your personal data, lodge a complaint, or exercise your rights as set out above via email at [email protected]

Privacy Policy

Privacy Policy

We ,University of the Thai Chamber of Commerce , take your privacy seriously. When we use your personal information to conduct our business and provide services to you, your personal information will be protected under the Personal Data Protection Act B.E. 2562.

As a data protection controller, we are legally required to inform you of this Privacy Policy, which explains how we collect, use or disclose your personal data and your rights as a data subject, and we confirm that we have taken action in accordance with this law to protect your personal data.

1. Definition of Personal Data

“Personal data” means information about an individual which enables that individual to be identified, either directly or indirectly, but does not include information specifically about a deceased person.

“Sensitive personal data” means data that requires special care in its collection or processing, such as race, political opinions, religious beliefs, sexual orientation, and biometric data. Sensitive data is protected more strictly by law than ordinary personal data.

2. Personal information we collect from you

We collect your information when:

You have visited our website.

You provide us with information through the website or application.

You provide us with information through our online contact channels or through normal channels.

We collect and process your personal data only as necessary to provide our services to you, to enable you to contact us and to carry out our educational services in a way that you can expect us to use your personal data for. The personal data we process can be categorized as follows:

Contact Data

This includes information such as name, address, email, phone number, school graduated from, academic qualifications, academic results, language test results, faculty of interest, reasons for applying, and the need for educational loan services.

Technical Data

This includes information such as your computer’s IP address, browser type, time zone settings, location, operating system, platform and technology of the device used to access the website.

Usage Data

This includes information such as the pages you visited before you entered the Platform, the pages you visit, the amount of time you spend viewing the pages, the products or information you search for on the Platform, the time and date of your visit to the Website, and click-through data.

Communication Data

This includes information such as emails, chat logs, and communication data between university officials and the personal data owner.

Data used as evidence for identity verification (Identity-verification Data)

This includes information such as national identification number, address, date of birth, and gender.

Sensitive personal data

Including race, religious beliefs

3. Source of personal data

3.1 For students who expect to apply to study with us (Prospective Students)

We collect your information when:

You have visited our website.

You provide us with information through the website or application.

You provide us with information through our online contact channels or through normal channels.

You provided us with information through a questionnaire from the university’s public relations activities.

You provide us with information through the Office of Student Recruitment’s activities.

You provide us with information through agents who provide educational advisory services both domestically and internationally.

3.2 For current students (Existing Students)

We collect your information when:

You are registered as a student at the University of the Thai Chamber of Commerce.

If you are an international student, you provide information through a university representative in your country or through an educational advisory service provider.

You have visited our website.

You provide us with information through the website or application.

3.3 For general public

We obtain personal data directly from you through the following channels:

You register by creating an account via the website or application.

You contact us to obtain information about our courses and educational services.

You make an appointment to inquire about our courses and educational services.

You provide us with information when you contact one of our agencies.

You participate in our promotional activities via electronic channels, social networks or normal channels.

3.4 Your personal information that we receive from third parties

3.5 Personal information obtained from cookies

When you visit our website, personal information obtained from cookies helps us to provide you with a better, faster, safer and more private service when you use the Services and/or access the Platform.

4. Purpose of collecting, using and disclosing personal information

It is necessary for the University’s legitimate interests (Legitimate Interests) or the legitimate interests of a third party or your legitimate interests, without impairing your fundamental rights over your personal data.

It is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.

To comply with the University’s laws or to prevent or suppress danger to the life, body or health of an individual.

To achieve research or statistical purposes for which appropriate safeguards have been put in place to protect the rights and freedoms of data subjects.

We have summarized our use of your personal data to provide our services to you and explained the legitimate data processing bases we use to process your personal data for each activity in the table below.

Objective

Data types

Legitimate basis for processing personal data

1. For students who are expected to apply to study with us (Prospective Students)

1.1 To contact you to answer questions and provide advice on university education information, faculty information, departments, and activities related to higher education.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the university as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.

1.2 To organize public relations activities and provide advice on studying at university to high school students.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the university as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the state.

2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.

2. For current students (Existing Students)

2.1 To manage registration and process student requests related to registration and manage education, such as course registration, course withdrawal-exchange, graduation, degree approval, etc.

– Contact information

– Communication information

– Information used as evidence to confirm identity

2.2 To carry out procedures regarding the receipt of tuition fees and fees related to studying.

– Contact information

– Information used as evidence to confirm identity

2.3 To organize projects or activities to promote student learning, such as joining clubs, organizing academic seminars, organizing social and community service activities, organizing job fairs, etc.

– Contact information