Privacy Notice

Privacy Notice for students

1. Source of information

For students who are expected to apply to study with us (Prospective Students)

We collect your information when:

You have visited our website.
You provide us with information through the website or application.
You provide us with information through our online contact channels or through normal channels.
You provided us with information through a questionnaire from the University’s public relations activities.
You provide us with information through the Student Recruitment Division’s activities.
You provide us with information through agents who provide educational advisory services both domestically and internationally.

For Current Students

We collect your information when:

You are registered as a student at the University of the Thai Chamber of Commerce.
If you are an international student, you provide information through a University representative in your country or through an educational advisory service provider.
You have visited our website.
You provide us with information through the website or application.

Your personal data that we receive from third parties who collect, use or disclose personal data as instructed or on our behalf. Your personal data will not be used for any purpose other than the purposes for which we have specified or instructed, and we require such third parties to maintain the confidentiality and protection of your personal data in accordance with the standards of the Personal Data Protection Act of Thailand.

Personal data obtained from cookies when you visit our website. This information helps us to provide you with better, faster, safer and more personalized services when you use the Services and/or access the Platform.

2. Personal data we collect and process

We collect and process your personal data only as necessary to provide our services to you, to enable you to contact us and to carry out our educational services in a way that you can expect us to use your personal data for. The personal data we process can be categorized as follows:

Contact Data	This includes information such as name, address, email, phone number, school graduated from, academic qualifications, academic results, language test results, faculty of interest, reasons for applying, and the need for educational loan services.
Technical Data	This includes information such as your computer’s IP address, browser type, time zone settings, location, operating system, platform and technology of the device used to access the website.
Usage Data	This includes information such as the pages you visited before you entered the Platform, the pages you visit, the amount of time you spend on pages, the products or information you search for on the Platform, the time and date of your visit to the Website, and click-through data.
Communication Data	This includes information such as emails, chat logs, and communication data between University officials and the personal data owner.
Identity-verification Data	This includes information such as national identification number, address, date of birth, and gender.

3. Purpose of collecting, using and disclosing personal data

University of the Thai Chamber of Commerce is a University licensed as a private higher education institution, established under the Private Higher Education Institution Act B.E. 2546 (2003). Its objectives are to provide education, promote academic and higher vocational studies, conduct teaching, conduct research, provide academic services to society, and preserve national arts and culture. In carrying out these objectives, we use your personal data only as necessary and within the scope of data protection laws. We have a lawful basis of processing your personal data as specified in the Personal Data Protection Act B.E. 2562 (2019), as follows:

It is necessary for the performance of duties in carrying out missions for the public benefit because the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the state (Announcement of the Higher Education Commission on the Guide to Applying for a License to Establish a Private Higher Education Institution, 2015).
It is necessary for the University’s legitimate interests (Legitimate Interests) or the legitimate interests of a third party or your legitimate interests, without impairing your fundamental rights over your personal data.
It is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
To comply with the University’s laws or to prevent or suppress danger to the life, body or health of an individual.
To achieve research or statistical purposes for which appropriate safeguards have been put in place to protect the rights and freedoms of data subjects.

We have summarized our use of your personal data to provide our services to you and explained the legitimate data processing bases we use to process your personal data for each activity in the table below.

objective	Data types	Legitimate basis for processing personal data
1. For students who are expected to apply to study with us (Prospective Students)
1.1 To contact you to answer questions and provide advice on University education information, faculty information, departments, and activities related to higher education.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the state. 2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.
1.2 To organize public relations activities and provide advice on studying at University to high school students.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government. 2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.
2. For current students (Existing Students)
2.1 To manage registration and process student requests related to registration and manage education, such as course registration, course withdrawal-exchange, graduation, degree approval, etc.	– Contact information – Communication information – Information used as evidence to confirm identity	It is necessary for the performance of duties in carrying out missions for the public interest because the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.
2.2 To carry out procedures regarding the receipt of tuition fees and fees related to studying.	– Contact information – Information used as evidence to confirm identity	It is necessary for the performance of duties in carrying out missions for the public interest because the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.
2.3 To organize projects or activities to promote student learning, such as joining clubs, organizing academic seminars, organizing social and community service activities, organizing job fairs, etc.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government. 2) For the legitimate interests of the University in organizing activities or projects that promote learning and activities that are beneficial in enhancing the experience for students.
2.4 To organize projects or activities that encourage students to do internships in real workplaces that are organizations outside the University.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government. 2) For the legitimate interests of the University in organizing activities or projects that promote learning and activities that are beneficial in enhancing the experience for students.
2.5 To promote the creation of academic works and research of students, such as joint research with teachers and writing academic/research articles.	– Contact information – Communication information	1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government. 2) For the legitimate benefit of the University in organizing activities or projects that promote research for students. 3) To achieve research or statistical purposes for which appropriate safeguards have been provided to protect the rights and freedoms of data owners.
2.6 To compile and collect alumni information for contacting and building relationships between the University and students.	– Contact information – Communication information	For the legitimate interests of the University in fostering relationships with alumni and to publicize the University’s activities to alumni.
3. For students who are expected to apply to study with us (Prospective Students) and current students (Existing Students)
3.1 To analyze information about your use of the website in order to develop our website and to resolve technical problems that may arise when using the website.	– Contact information – Technical information	For the legitimate interests of the University in using your website usage data and statistics to develop our website services more efficiently and to improve the website to meet your needs and solve any problems arising from using the website services.
3.2 To carry out operations regarding the entry into any student loan contract or scholarship contract.	– Contact information – Information used as evidence to confirm identity	1) For the performance of a contract to which you are a party or for use in taking actions at your request prior to entering into a contract. 2) For the legitimate benefit of the University in promoting students’ access to financial resources for educational purposes.
3.3 To market to you to promote student recruitment or publicize University courses, activities or other educational services that may be of interest to you.	– Contact information	1) For the legitimate interests of the University in publicizing the University’s courses and activities to you. 2) In the event that the University wishes to conduct direct marketing to you, we will seek your explicit consent before we use your personal data for direct marketing purposes.

objective

Data types

Legitimate basis for processing personal data

1. For students who are expected to apply to study with us (Prospective Students)

1.1 To contact you to answer questions and provide advice on University education information, faculty information, departments, and activities related to higher education.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the state.

2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.

1.2 To organize public relations activities and provide advice on studying at University to high school students.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.

2. For current students (Existing Students)

2.1 To manage registration and process student requests related to registration and manage education, such as course registration, course withdrawal-exchange, graduation, degree approval, etc.

– Contact information

– Communication information

– Information used as evidence to confirm identity

It is necessary for the performance of duties in carrying out missions for the public interest because the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2.2 To carry out procedures regarding the receipt of tuition fees and fees related to studying.

– Contact information

– Information used as evidence to confirm identity

It is necessary for the performance of duties in carrying out missions for the public interest because the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2.3 To organize projects or activities to promote student learning, such as joining clubs, organizing academic seminars, organizing social and community service activities, organizing job fairs, etc.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2) For the legitimate interests of the University in organizing activities or projects that promote learning and activities that are beneficial in enhancing the experience for students.

2.4 To organize projects or activities that encourage students to do internships in real workplaces that are organizations outside the University.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2) For the legitimate interests of the University in organizing activities or projects that promote learning and activities that are beneficial in enhancing the experience for students.

2.5 To promote the creation of academic works and research of students, such as joint research with teachers and writing academic/research articles.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2) For the legitimate benefit of the University in organizing activities or projects that promote research for students.

3) To achieve research or statistical purposes for which appropriate safeguards have been provided to protect the rights and freedoms of data owners.

2.6 To compile and collect alumni information for contacting and building relationships between the University and students.

– Contact information

– Communication information

For the legitimate interests of the University in fostering relationships with alumni and to publicize the University’s activities to alumni.

3. For students who are expected to apply to study with us (Prospective Students) and current students (Existing Students)

3.1 To analyze information about your use of the website in order to develop our website and to resolve technical problems that may arise when using the website.

– Contact information

– Technical information

For the legitimate interests of the University in using your website usage data and statistics to develop our website services more efficiently and to improve the website to meet your needs and solve any problems arising from using the website services.

3.2 To carry out operations regarding the entry into any student loan contract or scholarship contract.

– Contact information

– Information used as evidence to confirm identity

1) For the performance of a contract to which you are a party or for use in taking actions at your request prior to entering into a contract.

2) For the legitimate benefit of the University in promoting students’ access to financial resources for educational purposes.

3.3 To market to you to promote student recruitment or publicize University courses, activities or other educational services that may be of interest to you.

– Contact information

1) For the legitimate interests of the University in publicizing the University’s courses and activities to you.

2) In the event that the University wishes to conduct direct marketing to you, we will seek your explicit consent before we use your personal data for direct marketing purposes.

We may use more than one legitimate basis for processing your personal data depending on the purposes for which we process your personal data.

4. Marketing and promotion activities

We may conduct marketing and promotional activities or have them done by third parties with whom we have agreements in the following cases:

Where we use your personal data for direct marketing purposes with you, we will only do so if you have given us your explicit consent and we have informed you of the purposes of using your data for direct marketing purposes. You can revoke your consent to direct marketing at any time through our opt-out system.

In case of participating in activities to promote student recruitment, such as gaming activities or activities on various social network channels to publicize the University’s courses and services to you, we will not process your information for direct marketing purposes unless you give us your express consent to use your personal information for direct marketing purposes. We will inform you of the purpose of using your information for direct marketing purposes, and you can revoke your consent to direct marketing at any time through our data cancellation system.

5. Cookie Policy

Cookies are text files placed on your computer that are used to store details of your internet usage logs or website browsing behavior. You can learn more about Cookies at https://www.allaboutcookies.org/

We use Cookies to collect information about your visits to our website to help us provide you with better, faster, safer and more personalized services when you use our website. We use Cookies in the following cases:

Functionality Cookies: We use these types of Cookies to help us recognize your device or browser so that we can tailor content to your personal interests more quickly and make our Services and Platforms more convenient and useful to you. To disable these Cookies, you can set your device preferences using your browser’s or device’s Help Center.
Analytics cookies: We use Analytics cookies provided by third parties to collect information about how visitors use our website. We anonymize all visitor data and pass it on to third parties who can use it or disclose it to others who process it for their own purposes, as permitted by law. The third parties do not combine your information from our website with information they already have. You can choose to disable these cookies on our website.

6. Disclosure or sharing of personal data

1. We may disclose or share your personal data with third parties as follows:

Online advertising platform
Marketing company or consultant
Regulatory agencies such as the Personal Data Protection Commission
Business or professional consultant
Agencies responsible for overseeing education, such as the Ministry of Higher Education, Science, Research and Innovation (MHESI) and the Office of the Higher Education Commission, etc.
The organization where students wish to intern or apply for employment

We require third parties with whom we disclose or share your Personal Data as described above to keep your Personal Data confidential and protect it in accordance with the standards set out in the Thai Personal Data Protection Act and to use your Personal Data only for the purposes for which we have specified or instructed such third party to do so. Such third parties may not use your Personal Data other than for such purposes.

2. When requested, we may disclose your personal data to relevant authorities to comply with the law, such as to prevent threats to life or health, for law enforcement purposes, indictment, exercising and defending legal rights, and preventing fraud.

7. Storage and retention period of personal data

We store your personal data in our information systems and have standard security measures in place to ensure the security of our information systems and the use of your personal data by taking the following measures:

Restrict access to personal data that may be accessed by employees, agents, partners or third parties. External access to personal data will be permitted only as required or as directed, and external parties are required to maintain the confidentiality and protection of personal data.
Provide technological means to prevent unauthorized access to computer systems.
Destroy your personal data for security purposes when it is no longer required for legal or business purposes.
There is a process for handling cases of personal data breaches or suspected cases, and personal data breaches must be reported to the Personal Data Protection Committee in accordance with the conditions stipulated by law.

Duration of retention of personal data

We retain your personal data for the period necessary to fulfill the purposes for which we provide our services and in accordance with applicable accounting standards, legal standards and other regulations.
In determining the retention period for data, we consider the amount, nature of use, purpose of service, sensitivity of personal data, and potential risk of misuse of personal data, and the periods required by applicable laws.
Your personal information obtained from cookies when you use our website will be kept for no longer than 13 months or as required by applicable law.

8. Rights of data owners

As a data subject, you have the following rights to the extent permitted by law:

You have the right to withdraw your consent (Right to withdraw Consent) to the processing of your personal data. You have given consent to the Company for the duration that your personal data is with the Company.
You have the right to access your personal data (Right of Access) and request that the Company provide you with a copy of such personal data, including requesting that the Company disclose the source of personal data that you have not given consent to the Company.
You have the right to have the Company correct your personal data or add incomplete data (Right to Rectification).
You have the right to request that the Company erase your data for certain reasons (Right to Erasure)
You have the right to request that the Company restricts the use of your personal data for certain reasons (Right to Restriction of Processing)
You have the right to transfer the personal data you have provided to the Company to another data controller or to yourself for certain reasons (Right to Data Portability).
You have the right to object to the processing of your data on certain grounds (Right to Object)

9. Contact channels

You may contact the University’s Data Protection Officer (DPO) at [email protected] or the University’s Legal Affairs Division to submit a request to exercise the above rights.

Privacy Notice

Privacy Notice for students

1. Source of information

For students who are expected to apply to study with us (Prospective Students)

We collect your information when:

You have visited our website.

You provide us with information through the website or application.

You provide us with information through our online contact channels or through normal channels.

You provided us with information through a questionnaire from the University’s public relations activities.

You provide us with information through the Student Recruitment Division’s activities.

You provide us with information through agents who provide educational advisory services both domestically and internationally.

For Current Students

We collect your information when:

You are registered as a student at the University of the Thai Chamber of Commerce.

If you are an international student, you provide information through a University representative in your country or through an educational advisory service provider.

You have visited our website.

You provide us with information through the website or application.

Personal data obtained from cookies when you visit our website. This information helps us to provide you with better, faster, safer and more personalized services when you use the Services and/or access the Platform.

2. Personal data we collect and process

We collect and process your personal data only as necessary to provide our services to you, to enable you to contact us and to carry out our educational services in a way that you can expect us to use your personal data for. The personal data we process can be categorized as follows:

Contact Data

This includes information such as name, address, email, phone number, school graduated from, academic qualifications, academic results, language test results, faculty of interest, reasons for applying, and the need for educational loan services.

Technical Data

This includes information such as your computer’s IP address, browser type, time zone settings, location, operating system, platform and technology of the device used to access the website.

Usage Data

This includes information such as the pages you visited before you entered the Platform, the pages you visit, the amount of time you spend on pages, the products or information you search for on the Platform, the time and date of your visit to the Website, and click-through data.

Communication Data

This includes information such as emails, chat logs, and communication data between University officials and the personal data owner.

Identity-verification Data

This includes information such as national identification number, address, date of birth, and gender.

3. Purpose of collecting, using and disclosing personal data

It is necessary for the University’s legitimate interests (Legitimate Interests) or the legitimate interests of a third party or your legitimate interests, without impairing your fundamental rights over your personal data.

It is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.

To comply with the University’s laws or to prevent or suppress danger to the life, body or health of an individual.

To achieve research or statistical purposes for which appropriate safeguards have been put in place to protect the rights and freedoms of data subjects.

We have summarized our use of your personal data to provide our services to you and explained the legitimate data processing bases we use to process your personal data for each activity in the table below.

objective

Data types

Legitimate basis for processing personal data

1. For students who are expected to apply to study with us (Prospective Students)

1.1 To contact you to answer questions and provide advice on University education information, faculty information, departments, and activities related to higher education.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the state.

2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.

1.2 To organize public relations activities and provide advice on studying at University to high school students.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2) For the legitimate interests of the University in providing information that is useful to you in deciding on the field of study you wish to study.

2. For current students (Existing Students)

2.1 To manage registration and process student requests related to registration and manage education, such as course registration, course withdrawal-exchange, graduation, degree approval, etc.

– Contact information

– Communication information

– Information used as evidence to confirm identity

2.2 To carry out procedures regarding the receipt of tuition fees and fees related to studying.

– Contact information

– Information used as evidence to confirm identity

2.3 To organize projects or activities to promote student learning, such as joining clubs, organizing academic seminars, organizing social and community service activities, organizing job fairs, etc.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2) For the legitimate interests of the University in organizing activities or projects that promote learning and activities that are beneficial in enhancing the experience for students.

2.4 To organize projects or activities that encourage students to do internships in real workplaces that are organizations outside the University.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2) For the legitimate interests of the University in organizing activities or projects that promote learning and activities that are beneficial in enhancing the experience for students.

2.5 To promote the creation of academic works and research of students, such as joint research with teachers and writing academic/research articles.

– Contact information

– Communication information

1) It is necessary for the performance of duties in the public interest, as the operation of the University as a private higher education institution is considered a public service in which the state has allowed the private sector to manage education on behalf of the government.

2) For the legitimate benefit of the University in organizing activities or projects that promote research for students.

3) To achieve research or statistical purposes for which appropriate safeguards have been provided to protect the rights and freedoms of data owners.

2.6 To compile and collect alumni information for contacting and building relationships between the University and students.

– Contact information

– Communication information

For the legitimate interests of the University in fostering relationships with alumni and to publicize the University’s activities to alumni.

3. For students who are expected to apply to study with us (Prospective Students) and current students (Existing Students)

3.1 To analyze information about your use of the website in order to develop our website and to resolve technical problems that may arise when using the website.