Privacy Policy I Landy Grand

1. Definitions

Company means Landy Home (Thailand) Co., Ltd.

Landy Home Group means Landy Home (Thailand) Co., Ltd. and subsidiaries, affiliated companies or group companies, namely Landy Bangkok Co., Ltd., Trendy Home Builder Co., Ltd., Nikko Planning and Development Co., Ltd., Capplus Co., Ltd. and other companies.

Personal Data Owner means an individual who owns personal data that the Company collects, uses or discloses. Not limited to customers, shareholders, partners, service providers and stakeholders of the Company

Information means personal information, non-personal information, system information, location information, cookies

Personal information means information about an individual that enables the identification of that individual, directly or indirectly, in accordance with the Personal Data Protection Act B.E. 2562 and its amendments, and other relevant laws

Sensitive personal information means personal information about race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal history, health information, disabilities, trade union information, genetic information, biometric information or any other information that affects the owner of personal information in the same way, as specified by the Committee

Biometric information means personal information resulting from the use of techniques or technologies related to the use of physical or behavioral characteristics of an individual, enabling the identification of that individual that is different from other persons, such as facial image simulation data, iris simulation data or fingerprint simulation data

Public information means personal information that the owner of personal information has disclosed to the public, such as social media profile information When using social media credentials such as Facebook, Instagram, Twitter, Line and other online platform formats to connect or access any of the Company's services, such as social media account ID, interests, likes and friends list of the personal data owner, which the personal data owner can control the collection of this privacy through the social media account settings provided by the social media service provider.

Personal data controller means a person who has the authority to decide on the collection, use or disclosure of personal data.

Personal data processor means a person who carries out the collection, use or disclosure of personal data at the instruction of or on behalf of the personal data controller.

Data processing means any operation that is performed on personal data or sets of personal data, whether or not by automatic means, such as recording, organizing, structuring, storing, changing or modifying, considering use, disclosing by forwarding, publishing or other actions that make it available, arranging or combining, restricting, deleting or destroying.

Application means a program or set of instructions used to control the operation of mobile computers and various peripheral devices to work according to instructions and respond to the needs of the user. By the application (Application) must have something called a user interface (UI) to be a medium for various uses.

IP Address means a number symbol assigned to each type of device, such as a computer or printer, that is part of a computer network that uses the Internet Protocol to communicate.

Cookie means a small piece of data that the company's website sends to a computer or electronic device connected to the Internet to store personal information. Cookies will be sent back to the original website each time you return to view the website.

Log means data generated from the use of the application, including the origin, destination, route, time, date, volume, duration, type of service, or other information related to the use of the application.

Non-personally identifiable information means data that has gone through the anonymization process.

Office means the Office of the Personal Data Protection Committee.

Personal Data Protection Policy

The Company recognizes and places great importance on the rights and privacy of the owner of personal data. The Company will take strict measures to maintain security, confidentiality, and prevent the use of personal data without the permission of the owner of the personal data. The Company will proceed in accordance with the objectives and consent of the owner of the personal data given to the Company regarding the collection, use, or disclosure of such personal data. Or as required by law and in accordance with international standards

2. How it is obtained The Company collects personal information By the following process

2.1 Other services apart from those specified on our website, such as other products or services operated by us or our affiliates, which are not expressly specified as being subject to this policy

2.2 Personal information received from affiliates or companies in the group

2.3 Personal information from third parties, such as agents, shops or companies that provide data collection services, partners, allies, etc.

2.4 Personal information received from visiting the website, such as the name of the internet service provider and IP address through internet access, date and time of visiting the website, pages visited while visiting the website, and the address of the website that is directly linked to the company's website

2.5 Application usage behavior, which will collect your usage logs from the company's application

2.6 Personal information received from public records and non-public records that the company has the right to collect by law

2.7 Personal information received from government agencies or regulatory agencies that exercise legal authority

3. Purpose of collecting, using and disclosing personal information

The company has the following objectives for collecting, using or disclosing personal information:

3.1 To provide services, improve the company's products and services, including other services or products that will be available in the future, as well as maintenance Maintenance and operations related to the provision of such services

3.2 For various transactions related to the Company's products or services, such as after-sales service, payment for house construction reservations via the Ecommerce system, etc.

3.3 For managing the relationship between the Company and the owner of personal data

3.4 To confirm and/or identify the owner of personal data when using the service through various channels or contacting the Company

3.5 To communicate, inform and/or receive various information from the Company or changes that occur to the Company

3.6 To act in accordance with the wishes of the owner of personal data that have been notified to the Company

3.7 To present various benefits and/or other services of the Company, such as providing advice and/or offers on products and services, including various promotions to promote marketing activities, including transactions related to the use of the Company's services

3.8 For the Company's business operations, such as data analysis, inspection, development of new products, improvement or change of services, analysis of service usage, surveys, and organization of sales promotion activities Consideration of the Company's operations and business expansion

3.9 For any necessary and appropriate actions to

3.9.1 Investigate and prevent actions that violate or may violate the law

3.9.2 Respond to requests from government agencies or governments, including government agencies or foreign governments where the data subject resides

3.9.3 Enforce the Company's terms of service and policies related to personal data

3.9.4 Protect the Company's business operations

3.9.5 Remedy, prevent or limit possible damage

3.10 To comply with the law, investigations by officials or regulators, or to comply with rules, regulations or obligations imposed by law or government

For other purposes not specified above, the data subject will be notified when the Company requests to collect personal data. In obtaining your personal data, the Company will collect, use or disclose your personal data under the purposes under Section 3 only if the following conditions are met:

1. You have given consent to the Company by law

2. It is necessary for the performance of a contract to which you are a party Or to use in taking action according to your request before entering into that contract

3. To prevent or suppress danger to life, body or health of individuals

4. It is necessary for the performance of duties in the public interest of the Company or to perform duties in the exercise of powers assigned by the state to the Company

5. It is necessary for the legitimate interests of the Company or of other individuals or juristic persons, unless such interests are less important than the fundamental rights in your personal data

6. It is necessary to comply with the law

7. Historical documents or archives are prepared for public interest or related to research or statis

4. Purpose of processing personal data

Data type

Purpose of processing

Personal data

Name

Email

Address

Office address

Telephone number

ID card number

Passport number

Date of birth

Nationality

Gender

Various settings

Security settings in your account

Other relevant information that is additionally collected for the purposes

Credit card number

IP address

When you visit the Company's website, you may be asked to register with the Company and/or you may be required to provide information Your personal information to the Company for the purpose of collecting information for marketing purposes of the Company, such as:

To contact and offer the Company's services or other offers about products or services of the Landy Home Group that you may have expressed interest in with the Company

To inform you about news, products and newsletters

To verify your identity

To maintain the security of your user account

To inform you about upcoming changes

Credit card information will be stored and verified through a third-party payment system. This information will not be Stored permanently on the Company's server and will be deleted immediately after passing the verification system by the third-party payment system to verify your identity.

Browser behavior data

Browser type

Domain

Visited website

Website access time

Referring website address

Customer support data

Log

To provide information on accessing and using the Company's website, including applications.

To manage the website and applications, for internal operations, fix website problems, analyze data, test, research, for security, audit, distortion, and manage user accounts.

To resolve and explore problems.

System data

To provide information on accessing and using the Company's website, to manage the website, for internal operations, fix website problems, analyze data, test, research, for security, audit, distortion, and manage user accounts.

Location data

The website will use the information collected by cookies for statistical analysis or other activities of Trendy Home to develop Trendy Home products and services in the future.

Cookies

The website will use the information collected by cookies for statistical analysis or other activities of the Company to develop Trendy Home products and services in the future.

5. Personal information collected

The Company will collect information that the owner of personal data has provided to the Company directly or personal information that the Company receives from the provision of services or operations of the Company through all channels.

Personal data means information related to the identification of a natural person.

An identifiable natural person means an individual who can be specifically identified directly or indirectly by referring to any identifier, such as:

Name

Email

Address / Office address

Telephone number

ID card number

Passport number

Date of birth

Nationality

Gender

Credit card number

Computer identification number (IP address)

Browsing behavior data means information that is not related to an identifiable natural person, such as browser type, domain, website visited, website access time, referring website address, information for customer support, which will be recorded on the Company's application.

System information means information that the Company automatically collects when you log in to the Company's website, whether through cookies, web beacons, login files, scripts, including technical information such as IP address, browser type, domain, website history visited, access time, referring website address, information about what you search for or view while using the Company's website, including application usage behavior.

Location data means data obtained from GPS, Wi-Fi, compass, accelerometer, IP address or public posts that indicate location data.

Cookies mean data that is placed on your computer by a web server. After a cookie is placed on your computer, the cookie will store or remember the user's information until the user closes the browser or until the user deletes or rejects the cookie. However, you will find it convenient to navigate the website easily because cookies will help store information. The websites you visit or open

6. Storage period and storage location of personal data

The Company will store personal data for as long as necessary, taking into account the purpose and necessity for the Company to collect, collect and process, including compliance with the requirements of applicable laws in such matters.

The Company will store personal data after the contract you have made with the Company has expired for a period of time and in accordance with the period and statute of limitations of relevant laws. The Company will store it in a storage location appropriate for the type of personal data. However, the Company is required to continue to store personal data even after the statutory statute of limitations has expired, such as in the case of legal proceedings or legal proceedings.

The Company will keep your personal data in good condition according to management protection measures. (Administrative Safeguard) Technical Safeguard and Physical Safeguard to maintain the appropriate security of personal data processing means maintaining confidentiality, integrity and keeping the data in a ready-to-use format (Availability) and preventing the breach of personal data. The Company has established policies, regulations and criteria for protecting personal data, such as information technology security standards and measures to prevent data recipients from leaving the Company, using or disclosing data outside the purpose or without authority or improperly. The Company has revised such policies, regulations and criteria from time to time as necessary and appropriate.

In addition, the Company has designated its employees, personnel, agents and data recipients to keep your personal data confidential and secure in accordance with the measures set by the Company when any action is required with your personal data.

7. Disclosure and Transfer of Personal Data Disclosure of Personal Data

The Company will disclose personal data to external parties and/or external organizations or agencies only in the following cases:

Related Group Companies and Affiliates of the Company: The Company will share or share your personal data. Within the Landy Home (Thailand) Co., Ltd. group, which includes Landy Bangkok Co., Ltd., Trendy Home Builder Co., Ltd., Nikko Planning and Development Co., Ltd., Capplus Co., Ltd. and other companies, for Marketing Purposes

Contractors/Contractors: In the event that the Company hires contractors to perform any action that requires the use of your personal information, such as zip codes, statistical analysis, or online activities the Website will require the contractors to perform such actions in order to protect the privacy of your personal information and the contractors are prohibited from using your personal information for any purpose other than to support the activities or work of Landy Home (Thailand) Co., Ltd.

Sellers/Agents In some cases, the Company may share your information with sellers or agents who are authorized for specific purposes, such as credit card processing

Government agencies, governments, or other organizations under the law In order to comply with laws, orders, requests, to coordinate with various agencies on matters related to compliance with the law, transfer, and/or send personal information abroad

In the event that the Company transfers, transfers, and/or sends information abroad, the Company will set standards for making agreements and/or business partnership contracts with the organizations that will receive such personal information. There are standards for protecting personal information that are acceptable and in accordance with relevant laws to ensure that personal information is protected securely, such as

In the event that the Company needs to store and/or transfer personal information for storage

Cloud processing The Company will consider organizations with international securit standards and will store personal information in an encrypted format. Or other methods that cannot identify the owner of the personal data, etc.

In addition, the owner of the personal data can check the list of external parties to whom the company will disclose personal data from the list of business partners. The list of external parties to whom the company will disclose personal data may change, increase or decrease. The company will always keep the information up to date.

8. Use of personal data of individuals with special sensitivity

In order to offer products or services of the company or to carry out the purpose of collecting personal data of the company, in some cases, the company needs to collect personal data that is especially sensitive, such as personal data related to race, religion or philosophy, sexual behavior, disability, trade union data, genetic data, biometric data and health data, etc. In this case, the company will notify and request consent from the owner of the personal data to use the personal data that is especially sensitive to carry out the purpose of using the company's personal data.

9. Use of personal data for marketing purposes

In addition to the above purposes and under the requirements of the law, the company will use personal data for marketing purposes, such as sending promotional documents by post, email and other methods, including direct marketing operations to increase the benefits that the owner of the personal data will receive from being a customer of the company through the introduction of related products and services.

You can choose not to receive marketing communications from the company. Except for necessary and relevant communications and/or services provided by the Company to you, such as reminders, installment payments, and receipts, etc.

10. Security and confidentiality of personal data

In order for the owner of personal data to be confident in the Company's management in preventing risks that may cause personal data to be unlawfully accessed, leaked, changed, edited, or lost, the Company has created awareness of information security and complies with internationally accepted information security standards and business continuity management and in accordance with the law.

The Company has measures to protect the privacy of the owner of personal data by limiting the right to access personal data of the owner of personal data to only persons who need to use such personal data to present products, products, and provide services of the Company, such as employees, representatives, advertising agencies, which persons who the Company allows to access such personal data must strictly adhere to and comply with the Company's personal data protection measures, including the confidentiality of such personal data. The Company has physical and electronic protection measures in accordance with the applicable regulatory standards to protect personal data.

11. Rights of the owner of personal data

Your rights are legal rights that you should be aware of. You can request to exercise various rights under the provisions of the law and policies currently in effect or to be amended in the future, as well as the criteria set by the Company.

Right to withdraw consent

You have the right to request access to your personal data held by the Company and request that the Company provide you with a copy of such data, including requesting that the Company disclose how it obtained your personal data, without your consent.

Right to data portability

You have the right to request that the Company has made such data available in a format that is generally readable or accessible by automated tools or devices, and that the Company can use or disclose such personal data by automated means, and to request that the Company transmit or transfer such personal data to another data controller where such an automated means is feasible, and to request that the Company transmit or transfer such personal data directly to another data controller, unless this is not possible because: Technical reasons

Right to object

You have the right to object at any time if the collection, use and disclosure of your personal data is for the legitimate interests of the Company or another person or to carry out a mission for the public interest. If you object, the Company will continue to collect, use and disclose your personal data only if the Company can demonstrate a legal reason that is more important than your fundamental rights or is for the purpose of asserting, complying with the law or defending a legal claim, as applicable.

Right to request deletion or destruction of data

You have the right to request the deletion or destruction of your personal data or anonymize it if you believe that your personal data has been collected, used and disclosed unlawfully or if you believe that the Company no longer needs to retain it for the purposes related to this Policy or when you have exercised your right to withdraw your consent or exercise your right to object as stated above.

Right to request the suspension of the use of data

You have the right to request the temporary suspension of the use of your personal data in the event that the Company is investigating your request to exercise your right to correct your personal data or to object, or in any other case where the Company no longer needs to delete or destroy your personal data in accordance with the relevant law, but you request the Company to suspend its use instead.

Right to request the correction of data

You have the right to request correction of your personal data to be accurate, up-to-date complete and not misleading.

Right to complaint

You have the right to file a complaint with the competent authority if you believe that the collection, use and disclosure of your personal data violates or fails to comply with relevant laws. Please see Section 16 for contact details of the Personal Data Protection Committee.

Exercise of rights

You can exercise your rights as stated above by filling out the request form and submitting a request to the responsible agency. However, the exercise of your rights may be limited under relevant laws and in some cases, there are necessary circumstances where the Company may refuse or be unable to act on your request to exercise the rights as stated above, such as to comply with the law or court order for the public interest, the exercise of rights may infringe the rights or freedoms of others, etc. If the Company refuses the request as stated above, the Company will inform you of the reasons for the refusal. Time period for exercising various types of rights

Right

Time period for action

Right to withdraw consent 7 days
Right to access data 30 days
Right to request data transfer 30 days
Right to object 30 days
Right to request deletion or destruction of data 30 days
Right to request suspension of data use 30 days
Right to request data correction 7 days

In addition, deletion or destruction Or make your personal data in a form that cannot identify the owner of the personal data or revoke the consent of the owner of the personal data can only be done under the provisions of the law and the contract made with the company. However, the exercise of such rights may affect the performance of the contract made with the company or the case of providing other services because the owner of the personal data will not be able to identify themselves. Therefore, there may be limitations in providing some services that require personal data and may cause the owner of the personal data to no longer receive the benefits, services and news from the company.

12. Links to external websites

The company's website will link to third-party websites, which may have different personal data protection policies from the company. The owner of the personal data is requested to study the personal data policy of that website to understand the details of personal data protection and to decide to disclose personal data. The company will not be responsible for the content, policies, damages or actions caused by the third-party website.

13. Personal Data Protection Officer

The company has appointed a personal data protection officer to inspect the operations related to the collection, use or disclosure of personal data to comply with the Personal Data Protection Act B.E. 2562 and the company's policies, regulations, announcements and orders, including coordinating and cooperating with the Personal Data Protection Committee Office and having other duties as specified by the Personal Data Protection Act B.E. 2562 and any amendments.

14. Questions about the privacy policy

If you have any suggestions or would like to inquire about the details of the collection, use and disclosure of your personal data, including the request to exercise your rights under this policy, you can contact the Company and/or the Data Protection Officer through the following channels:

Company name:

Landy Home (Thailand) Co., Ltd.

Address:

1 3rd and 8th Floors, Soi Lat Phrao 19, Lat Phrao Road, Chomphon Subdistrict, Chatuchak District, Bangkok 10900

Company website:

https://www.landyhome.co.th

Company Call Center:

02 938 3200

15. Contact channels

If you have any questions about the Company's privacy policy, the information the Company collects, or would like to exercise any of your rights under the Personal Data Protection Act according to Section 11, you can contact

Company name:

Landy Home (Thailand) Co., Ltd.

Address:

1 3rd and 8th Floors, Soi Lat Phrao 19, Lat Phrao Road, Chomphon Subdistrict, Chatuchak District, Bangkok 10900

Company website:

https://www.landyhome.co.th

The Company's Call Center:

02 938 3200

16. Contact the Appropriate Authority

If you wish to report a complaint or if you feel that the Company has not responded to your concerns in a satisfactory manner, You can contact and/or file a complaint with the Personal Data Protection Commission Office as detailed below.

Tel:

02 142 1033

Email:

pdpc@mdes.go.th

Or send a letter to:

120 Moo 3, State Administration Building (Building B), Government Complex, Chaeng Watthana,Office of the Personal Data Protection Commission, Office of the Permanent Secretary, Ministry of Digital Economy and Society, Chaeng Watthana Road, Thung Song Hong Subdistrict, Lak Si District, Bangkok 10210

17. Amendments to the Personal Data Protection Policy

The Company reserves the right to amend this Privacy Policy. Updates will be posted on the Company’s website at https://www.landyhome.co.th

Privacy Policy