Privacy Notice

Road Accident Victims Protection Company Limited

For Activity Relationships Group

          This Privacy Notice (this “Notice”) is prepared by Road Accident Victims Protection Company Limited (the “Company”). This Notice purposes to notify the Data Subject (the “Data Subject” or “You”) of the collection, usage, or disclosure of your personal data as well as your legal rights with respect to your personal data.
          The Company has collected, used, or disclosed your personal data under the Personal Data Protection Act B.E. 2562 (A.D. 2019). Therefore, the Company would like to notify you of the Privacy Notice as following.      

1. Definition
         
           In this Notice
          “Personal Data” shall mean any information relating to a person, which enables the identification of such Person, whether directly or indirectly, but not including the information of the deceased persons in particular.      

2. Personal Data Collected by the Company

          2.1 General Personal Data such as name, surname, identification card number, address, motor vehicle registration number, telephone number, office address, etc.
          2.2 Sensitive Personal Data such as religion, etc.
                 You are required to provide your personal data for the purpose of the operations under terms, agreements, or obligations between the Company and you.
                 In the case that the Company is required to collect your personal data to perform its legal duties or enter into the agreement made with you, if you fail to provide information necessary for the Company’s operations, the Company may not fulfill the operations under this agreement between you and the company and this may affect the compliance with any laws applicable to the Company or you.
                 If you provide the Company with the information of any third parties, you are required to comply with the Personal Data Protection Act. such as requesting consent or notifying the third parties of this Policy on the Company’s behalf to enable the Company to continue its operations under the purposes stipulated in this notice and the Office of Insurance Commission’s Personal Data Protection Policy.      

3. Sources of Personal Data

          The Company collects your personal data through the following channels:
                    3.1 The Company directly receives the personal data from you;
                    3.2 The Company may receive your data through websites and documents, The Company prescribes that the relevant officers shall strictly comply with the policies and practices on personal data management.      

4. The Company’s Purposes of Collection, Usage, and/or Disclosure of Personal Data

          The Company collects, uses, or discloses your personal data for the following purposes:

Purposes

The legal basis for collecting, using, or disclosing personal data.

4.1 To collect, use, and/or disclose any personal data to the Office of Insurance Commission(OIC) for the purposes of supervision and promotion of insurance business under the Insurance Commission Act. and Non-life Insurance Act in accordance with the OIC’s Personal Data Protection Policy available at its website (https://www.oic.or.th)

4.2 To comply with other applicable laws

It is necessary to comply with a law to which the Data Controller is subjected, in accordance with Section 24(6) of the Personal Data Protection Act B.E. 2562 (A.D.2019).

4.3 To prepare information, statistics, education, research, usage, and dissemination for the campaign of road accident reduction or for public benefits.

It is necessary for the performance of a task carried out in the public interest by the Data Controller in accordance with Section 24(4) of the Personal Data Protection Act B.E. 2562 (A.D.2019).


          If you have provided the Company with the consent for collection, usage, and/or disclosure of your personal data, you are entitled to withdraw such consent at any time. Unless there are legal or contractual limitations on such withdrawal that benefit you, your withdrawal of consent shall not affect any activities of collection, usage, or disclosure of your personal data to which your consent has been provided before such withdrawal.

     5. Disclosure of Your Personal Data
          
The Company may disclose your personal data to the following third parties or external entities:
                    5.1 The Thai General Insurance Association, concerning campaigns to reduce road accidents or for public benefit.
                    5.2 Government organizations or entities assigned by the government that are related to road safety.
                    5.3 The authorized service providers acting on the Company's behalf concerning contracts, agreements, or legal obligations.

     6. Personal Data Retention Period
          The Company will retain your personal data for a period not exceeding 2 years from the date of activities participation, unless retention is required by law or for legal proceedings.

     7. Rights of Data Subject
          You shall have the rights stipulated in the Personal Data Protection Act B.E. 2562 (A.D. 2019) as follows:
                    7.1 Right to access or request a copy of your personal data or disclosure of acquisition of personal data;
                    7.2 Right to request the Company to correct, complete, and update, and not misleading. If the Company is unable to fulfill the request, it must record the request along with the reasons in the log as required under Section 39.
                    7.3 Right to receive your personal data in readable format or commonly used by automated tools or devices and able for the use or disclosure of such data through automated means as well as right to request the Company to transmit or transfer your personal data to other data controllers when it could be automatically performed or request to directly receive your personal data transmitted or transferred to other data controllers by the Company unless it is not possible due to technical reasons;
                    7.4 Right to object to any collection, usage, and/or disclosure of your personal data at any time in accordance with the legal criteria;
                    7.5 Right to request the Company to delete or destruct or anonymize your personal data in accordance with the legal criteria;
                    7.6 Right to request the Company to suspend usage of your personal data in accordance with the legal criteria;
                    7.7 Right to make claims in the case that the Company or Data Processor and the Company’s employees or contractors violate or fail to comply with the Personal Data Protection Act B.E. 2562 (A.D. 2019) or any announcements issued by virtue thereof;
                    7.8 Right to withdraw your consent in accordance with the legal criteria. But this does not include personal data that is collected, used, or disclosed without consent as per Section 24, Section 26, and Section 27, paragraph one, of the Personal Data Protection Act B.E. 2562 (2019).

     8. Security of Retention of Personal Data
          The Company has provided security measures to prevent the loss, access, usage, revision, modification, or disclosure of personal data without authorization or unlawfully, in accordance with the laws.
                    In the event of a personal data breach that poses a risk to the rights and freedoms of the data subject, the Company will notify to the Office of the Personal Data Protection Committee within 72 hours of becoming aware of the breach. If the breach presents a high risk to the rights and freedoms of the data subject, the Company will promptly notify the data subject of the breach along with remedial measures without delay.

     9. Amendment of the Privacy Notice
          The Company shall review and update this notice to ensure its alignment with the conditions for collecting, using, or disclosing personal data. In the event of an update, the Company will inform you through its website or other designated channels.

     10. The Company’s Contact Channels
           In the case that you have any questions concerning the collection, usage, and/or disclosure of your personal data or wish to exercise any rights of the data subject, please contact the Company at:

             Contact Details of the Company
             Name:                      Road Accident Victims Protection Company Limited
             Address:                   No. 26, Sukhumvit 64/2 Alley, Sukhumvit Road, Phra Khanong District,
                                            Phra Khanong Tai Sub-district, Bangkok Metropolis 10260
             Tel:                          02-100-9191
             Working Hours:          08.30 AM – 05.00 PM

             Contact Details of the Data Protection Officer (DPO)
             The contact details of the Data Protection Officer of Road Accident Victims Protection Company Limited are as follows:
             Address:                   No. 26, Sukhumvit 64/2 Alley, Sukhumvit Road, Phra Khanong District,
                                            Phra Khanong Tai Sub-district, Bangkok Metropolis 10260
             Tel:                          02-100-9191
             Working Hours:          08.30 AM – 05.00 PM

          The Privacy Notice for Insured and Victims in accordance with the announcement no. ก 015/2566 regarding ‘Amendment of Attached Documents no. 001/2566’ has been withdrawn and it shall apply the Privacy Notice for Insured and Victims as outlined in this document instead, effective from 1st February 2025 onwards.

1 February 2025