Privacy Policy for Website Use

We will not use your personal information for any purpose other than providing the service or as required by law. We respect and respect the privacy of our customers with the utmost respect. The most important thing is the relationship between you and us.

* This Privacy Policy hereinafter referred to as the "Policy", first effective on October 1, 2021, with the following details:

* Clause 1 Definitions Within this Policy (a) "Website" means the website named novakrabi.com. and has a website address at https://www.novakrabi.com(b) "data controller" means service provider or website owner According to this policy, namely, Nova Creative Company, registration no. 0815561000091 Our office is located at 27 Maharaj 2 Road, Soi Ruenrudee, Pak Nam Subdistrict, Mueang District, Krabi Province, contact nova@novakrabi.com(c)."data processor" means a third party who processes data for the benefit of or on behalf of the data controller; that is achieved by its own state or through any means And whether it is prepared in the form of documents, files, reports, books, plans, maps, drawings, photographs, films, video or audio recordings. recording by computer by electronic means or any other means to enable the recordings to appear (e) "Personal Data" means information about any natural person. (f) "sensitive personal data" or "sensitive data" means User personal information about race, ethnicity, political opinions religious, religious or philosophical beliefs sexual behavior Criminal history Health information disability, genetics, biometric data, facial, iris, or fingerprint data union information or any other information which the Personal Data Protection Committee under the Personal Data Protection Law has declared to be sensitive personal data; who is the owner of personal data in accordance with this policy

* Art. 2 User Consent   in accessing the website The user agrees and consents to the collection, use and disclosure of personal data. Including sending or transferring personal data to foreign countries as follows

(a) Purpose of collection, use and disclosure of personal data Including sending or transferring personal data abroad. The user acknowledges, agrees and consents to the data controllers and data processors collecting, using And disclose personal information to parent companies, subsidiaries and affiliates companies, agents, business partners, contractors, financial institutions. consulting firm All commercial joint ventures or other organizations, including governments with statutory control. For the purpose of using the information

(b) personal data collected, used and disclosed, including sending or transferring personal data to foreign countries Users acknowledge, agree and consent to data controllers and data processors collecting, using and disclosing personal data. Including sending or transferring personal data abroad. only the following To be used in communication, providing information as the owner of personal data wants and using in public relations. notification of benefits and inform news Products and services of the company and/or its affiliates (c) data collection period, users acknowledge, agree and consent to data controllers and data processors collecting, using and disclosing personal data, including sending or transferring personal data. go abroad Until being contacted by the owner of the personal data that he did not wish the Company Continue to store and use your information.

* Art. 3 Linking information of website users to third-party service providers The user acknowledges, agrees and consents that the data controller may link the website user's data with third-party service providers. By linking or sharing information with third party service providers from time to timeThe data controller will notify users of which user data will be linked or shared with third party service providers. However, when the user expressly expresses his intention to allow such linking or sharing. including but not limited to accepting, allowing, linking, sharing or any other action which expressly expresses that the user has consented to the linking or sharing of data with such third party service provider


*  Art. 4 Tracking of user behavior on the website   The user acknowledges, consents and agrees that the data controller may use the following systems and/or technologies to track user behavior on the website: Cookies, Pixel tage, Google, Gps to develop services and offer products that meet the needs of users For the purposes stated below only to improve the service and offer products that meet the needs of users.

*  Art. 5 User's Withdrawal of Consent
    The User acknowledges that the User has the right to withdraw any consent that the User has provided to the data controller in accordance with this Policy. at any time by taking the following actions: notify in writing at admin@novakrabi.com The user also acknowledges that once the user has withdrawn their consent The user will be affected as follows, only having the right to visit the website, where the user has also agreed to the effect of withdrawing that consent.

*  Art. 6 User account  in using the website The data controller may provide individual user accounts for the use of the website. where the data controller has the sole right to approve the opening of a user account Set the user account type. Set access rights for each user account type. Website License any cost about user account. Duties and responsibilities of the user who is the owner of that user account. The user agrees to keep his user account name, password and any information strictly confidential. and agreed not to allow and to use our best efforts to prevent anyone else from using your user account.In the event that the user's account is used by another person The user agrees and warrants that the use by such other person is done on behalf of the user and is binding on the user as if it were the user himself.

*  Art. 7 Rights of Users In accessing the website in accordance with this policy and giving any consent in accordance with this policy Users are well aware of their rights as data subjects in accordance with the Personal Data Protection Law. Including but not limited to the rights of the user as follows

(A) Users may withdraw their consent given in accordance with this Policy at any time. By notifying in writing to the data controller in accordance with the methods and channels specified in this policy.
(B) Users have the right to access and obtain a copy of their own or related personal data that the data controller has collected in accordance with this Policy.
(C) Users are entitled to disclosure from the data controller regarding the acquisition of their personal data or related to them for which they have not given their consent. If there is such a case
(D) Users may have a data controller send or transfer their personal data or those relating to themselves to other data controllers. This includes obtaining the data sent or transferred directly from the data controller who sent or transferred that data.
(E) Users may object to the collection, use or disclosure of their personal data or those related to them in the following cases:
   
   (1) The data controller collects, uses or discloses the user's personal data for the necessity of the legitimate interests of the data controller or other persons in which the user may prove that he has better rights than the controller. information
   (2) The data controller collects, uses or discloses the user's personal data in order to comply with the data controller's laws where the user may prove that he has better rights than the data controller.
   (3) The data controller collects, uses or discloses such personal data for direct marketing purposes.  
   (4) The data controller collects, uses or discloses such personal data for scientific research purposes. historical or statistical, where the research study is not necessarily conducted in the public interest.
(F) Users may require the data controller to delete, destroy or de-identify the data subjects. In the following cases
   (1) When personal data is no longer necessary for retention in accordance with the purpose of collection, use or disclosure of such personal data
   (2) When a user who is a personal data subject has withdrawn his consent to the collection, use or disclosure of such personal data and the data controller has no other legal power to collect, use or disclose that personal data. longer
 
   (3) When users have lawfully objected to the collection, use or disclosure of such information
   (4) When the personal data has been collected, used or disclosed illegally, rules, regulations, and regulations relating to the protection of personal data.
(G) Users may request the data controller to suspend the use of their personal data while retaining it. In the following cases 
   (1) The data controller is being investigated by an expert committee in accordance with the Personal Data Protection Act against which the User has requested such an investigation.
   (2) Personal data has been collected, used or disclosed unlawfully, rules, regulations on personal data protection.
   
   (3) In the event that the user has a necessity for the data controller to keep their personal data for the benefit of the user's own claims, such as creating legal claims of the user. Compliance with or exercising legal claims or raising up against legal claims The user may have the data controller simply suspend the use of the data instead of deleting, destroying or de-identifying the data's owner.   
   (4) The data controller is in the process of verification or examination to deny an objection to the collection, use or dissemination of the user's personal data in accordance with the personal data protection laws to which the user has lawfully objected.
(H) When the user finds his/her personal information to be inaccurate, outdated, unclear, the user has the right to request the data controller to correct such personal information to be accurate, current, complete and misleading. can be wrong
(I) Users may complain to a panel of experts in relation to personal data protection laws in relation to actions, violations or non-compliance with laws, rules, regulations on personal data protection of the data controller and/or data processor


* Art. 8 Security
    To collect and use personal information in accordance with this policy The data controller shall provide appropriate security measures to prevent loss, access, use, alteration, or unlawful disclosure of data by means of standards, technology and/or systems as follows: Assign access rights to relevant persons. Use encryption (Encryption) to transmit data. and Firewall security, including controlling the data processor to maintain the security of personal data not less than that specified in this policy.

*  Art. 9 Amendments to personal information 
    The data controller shall provide the following auditing systems and measures:
* (A) correcting personal data to be accurate, current, complete and not misleading; (b) erasing and destroying personal data that exceeds the user's consented collection period; and (c) Deletion, destruction of personal data that is not related to the use of such personal data according to the user's consent.


* Art. 10 Collection Use and/or disclose personal data in accordance with personal data protection laws.
 The user acknowledges and agrees that the data controller may collect, use and/or disclose the user's information without the user's prior consent. However, as necessary and as long as it meets the objectives and only in the following cases:

(A) to achieve the objectives related to the preparation of historical documents or archives for the public interest; or in relation to studies or statistics which provide appropriate safeguards to protect the rights and freedoms of users' personal data.
(B) to prevent or suppress a danger to the life, body or health of any person;
(C) It is necessary for the performance of a contract to which the user of the personal data is a party or for the purpose of processing the request of the user of the personal data before entering into such contract.
(D) it is necessary for the performance of a duty in the public interest of the data controller or to perform the duty in exercising the power of the state entrusted to the data controller;
(E) it is necessary for the legitimate interests of the data controller or of another person where such interest takes precedence over the user's fundamental rights in personal data;
(F) Compliance with the data controller's laws. The data controller will primarily record the collection, use or disclosure of the user's personal data in accordance with the preceding paragraph.

*  Art. 11 Collection use and/or disclose sensitive personal data (Sensitive Data)
    The user acknowledges and agrees that in addition to the collection Use and/or disclose personal data that users have given their explicit consent to collect. used and/or disclosed personal information in accordance with this policy The data controller may collect Use and/or disclose sensitive personal data of users without prior consent from users. However, as necessary and as long as it meets the objectives and only in the following cases:
* (A) to prevent or suppress a danger to life, body or health of users of personal data subjects who are unable to give their consent for any reason
(B) is information publicly available with the explicit consent of the user of that personal information
(C) Necessary for establishment compliance The use or defense of legal claims
(D) it is necessary to comply with the law in order to achieve the objectives relating to
* (1) Preventive Medicine or Occupational Medicine Assessment of employees' ability to work medical diagnosis Providing health or social services medical treatment health management or systems and services in social work
(2) Public interest in public health, such as health protection from dangerous communicable diseases or epidemics that may be contagious or spread into the Kingdom. or controlling the standard or quality of medicines, medical supplies or medical devices which has provided appropriate and specific measures to protect the rights and liberties of users who own personal data, especially the confidentiality of personal data according to their duties or professional ethics
(3) labor protection social security National Health Insurance Welfare relating to medical treatment of persons with legal rights Motor vehicle accident victim protection or social protection The collection of personal data of users is necessary in order to fulfill the rights or duties of the data controller or the data subject user. It has put in place appropriate measures to protect the fundamental rights and interests of the users of the personal data.
(4) scientific research studies history or statistics or other public interests, however, by collecting, using and/or disclosing only as necessary and providing appropriate measures to protect the fundamental rights and interests of the users who own that personal data according to the Protection Committee. Personal information is announced
(5) important public interest It has put in place appropriate measures to protect the fundamental rights and interests of the users of the personal data.
* In this regard, the data controller will primarily record the collection, use or disclosure of the user's personal information in accordance with the preceding paragraph.

*  Art. 12 use of the website Of a person who is in the guardianship, kindergarten or guardian of the user The user warrants that he is not and will not allow any person of the following to visit, use or become a member of the website.
(A) an incompetent person who is under the guardianship of the user
(B) a quasi-incompetent person who is in the custody of the user in the event that the user consents to the aforementioned person to visit, use or become a member of the website You agree that you have exercised parental, guardianship or guardianship of such person, as the case may be, in all agreements and consents to this policy for and on behalf of such person.


*  Art. 13 Sending or transferring personal data abroad   The data controller may send or transfer the user's personal data abroad in the following cases:
(A) The destination country or international organization that receives personal data has adequate personal data protection standards in accordance with laws, rules, regulations on personal data protection.
(B) obtaining consent from the subject of personal data Where the user, the owner of the personal data, has been informed and aware of the inadequate personal data protection standards of the destination country or international organization receiving the data.
(C) Compliance with the law
(D) it is necessary for the performance of a contract to which the user of the personal data subject is a party or for the purpose of processing the request of the user of the personal data subject before entering into the contract;
(E) is the performance of a contract between the data controller and another person for the benefit of the user who owns that personal data

(F) to prevent or suppress a danger to the life, body or health of the user, the subject of such personal data or any person When the subject of personal data is unable to give consent at that time
(G) It is necessary for the performance of important public interest missions.

*  Art. 14 Notification of personal data breachIn the event that the data controller becomes aware of a personal data breach, irrespective of the breach by any person. The data controller will take the following actions: The data controller will report such personal data breach to the Office of the Personal Data Protection Commission. without delay as much as can be done within 72 (seventy-two) hours from the date of knowledge of the incident

*  Art. 15 Complaints and Reports of Problems with Personal Data
    Users may complain and report issues with their personal information. including but not limited to requesting the data controller to update and/or correct the information; objection to data collection or suspend the use of information at the following channels, call: 075-621017
E-mail: admin@novakrabi.com


*  Art. 16 Saving important items  Unless the Personal Data Protection Law stipulates the data controller's rights otherwise. The data controller will record important records regarding the storage, use, or disclosure of data in writing or electronically for verification by the user, the data subject, or by the government agency. including but not limited to the following items
(A) Personal Data Collected
(B) Purpose of collection of each type of Personal Data
(C) Information about the data controller
(D) Period of retention of personal data
(E) Rights and means of access to personal data including conditions relating to persons who have access to personal data and conditions for accessing that personal data

(F) Collection, use or disclosure of personal data that is exempt from the consent of the data subject user.
(G) Rejection of requests and objections.
(H) details about security measures in personal data

* Art. 17 Policy Amendment
    The data controller may amend and change the text of this policy. at any time and whether in whole or in part The data controller will notify the user of changes from time to time so that the user can consider and take action to accept them by electronic means or by any other means. And if the user has already taken steps to accept it, such amended policy shall be deemed to be part of this policy.

* Art. 18 Relationship of the parties
    Whereas both parties understand and know that Entering into this policy does not make the parties and their employees have any relationship as employees under the labor law or partners under the partnership and company law in any way.

* Art. 19 Assignment of rights Unless expressly stated otherwise in this policy. The parties agree not to transfer their rights, duties and/or liabilities under this Policy to any person without the prior written consent of the other party.

* Art. 20 Dispute resolution
 If there is a dispute any conflict Occurs as a result of this policy. If the parties are unable to agree The parties agree to bring such dispute to court in Thailand.