ServerToday (Thailand) Co., Ltd.
ServerToday (Thailand) Co., Ltd. ("the Company") places great importance on protecting the personal data of its customers, including individuals acting on behalf of juristic persons who are data subjects. The Company is committed to ensuring the security of your personal data in compliance with the Personal Data Protection Act B.E. 2562 and other applicable laws. This Privacy Notice explains the details of how we collect, use, and disclose ("process") your personal data, as well as your legal rights as a data subject.
This Privacy Notice covers personal data of job applicants and company personnel such as consultants, executives, officers and current employees, former employees, interns, and any persons related to the Company's personnel such as employees' family members, emergency contacts, etc.
"Customer" means any person who is a target of the Company's product or service sales operations, including participants in marketing campaigns or activities, persons interested in products or services through various channels, and/or users of the Company's services through online and electronic media. This also includes persons legally authorized to act on behalf of customers, such as guardians of minors, guardians of incompetent persons, and curators of quasi-incompetent persons.
"Personal Data" means information about an individual that can identify that person, directly or indirectly, excluding data of deceased persons specifically. Examples include name, surname, nickname, address, phone number, national ID number, passport number, social security number, driver's license number, tax ID, bank account number, credit card number, email address, IP address, Cookie ID, Log File, etc.
The following is not considered personal data: business contact information that does not identify an individual (e.g., company name, company address, corporate registration number, work phone numbers, work email such as info@servertoday.com), anonymous data, pseudonymous data that cannot re-identify individuals, and data of deceased persons.
"Sensitive Personal Data" means personal data relating to race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union data, genetic data, biometric data, or other data that affects the data subject in a similar manner as determined by the Personal Data Protection Committee. The Company handles such data with special care and will only collect, use, and/or disclose sensitive data with explicit consent or as permitted by law.
Throughout this Privacy Notice, unless specifically stated otherwise, "Personal Data" and "Sensitive Personal Data" relating to the data subject above shall be collectively referred to as "Personal Data".
Where the Company receives a copy of your national ID card or extracts data electronically for identity verification and legal transactions, the data may include religious information (sensitive data). The Company does not intend to collect such data and requests that you redact or obscure this information. If you do not do so, the Company reserves the right to redact it to protect your sensitive personal data.
The Company collects personal data and/or sensitive data through the following processes:
Such as data from service applications and supporting documents, personal data or other data change requests, service requests, product or service inquiries, complaints, account or profile registrations via both offline and online channels, contact with the Company in any form (including written, verbal, image, and audio), surveys, feedback through various channels, and visits to the head office, branch offices, customer service centers, or exhibition booths, etc.
When you use the Company's services or visit the website via electronic devices (mobile phones, computers, laptops, etc.) using technology called "cookies" or similar technologies.
Reliable public data sources including the Department of Provincial Administration, Department of Business Development, commercial data sources, websites, applications, social media, data providers, agencies, or associations related to your products or services.
Data from interactions with Company employees, agents, partners, or authorized representatives through websites, applications, social media, phone, email, meetings, interviews, SMS, fax, mail, video calls, or other means. Data may be collected in text, image, and audio formats.
Data from participation in marketing campaigns, contests, lucky draws, events, or competitions organized by or on behalf of the Company and/or partners. When you provide third-party personal data, you warrant the accuracy of such data and confirm that you have informed those persons about this Privacy Notice.
The Company may collect the following types of personal data:
Name, surname, age, date of birth, nationality, national ID number, passport
Address, phone number, email
User account, usage history
Copy of national ID card, copy of passport
Purchase history, credit card details, bank account
IP address, Cookie ID, website usage history
Photos, videos, and other data considered personal data under applicable law
The Company collects, uses, or discloses your personal data under the following legal bases:
The purposes for collecting, using, and disclosing customers' personal data include, for example:
To fulfill the purposes stated in this Privacy Notice, your personal data may be disclosed to:
Disclosed to relevant internal departments on a need-to-know basis.
Your personal data may be disclosed or transferred to the following external organizations:
The Company may transfer your personal data internationally when necessary:
7.1 The Company may send or transfer your personal data to other persons both domestically and internationally where necessary to fulfill a contract you are party to, or pursuant to a contract between the Company and another person or juristic person for your benefit, or to carry out your pre-contractual request, or to prevent or suppress harm to the life, body, or health of you or others, to comply with law, or as necessary to carry out a mission of significant public interest.
7.2 The Company may store your data on computers, servers, or clouds operated by third parties, and may use software or platform services provided by third parties to process your personal data. The Company will not allow unauthorized persons to access personal data and will require such third parties to maintain appropriate personal data security measures.
7.3 Where it is necessary to send or transfer your personal data internationally, the Company will comply with personal data protection law and implement appropriate measures to ensure your data is protected, that you can exercise your rights as required by law, and that recipients maintain appropriate data protection measures, process the data only as necessary, and take steps to prevent unauthorized use or disclosure.
The Company retains your personal data as follows:
The Company implements measures in accordance with Section 37 of the PDPA and ISO/IEC 27701 standards, including appropriate technical, physical, and organizational security measures to prevent unauthorized loss, access, use, alteration, modification, or disclosure of personal data, including:
Data subjects have the following rights regarding their personal data:
Additional Note: The exercise of the above rights may be limited by law, such as when the Company has legal obligations or court orders, or when exercising the right would violate others' rights. If a request must be denied, the Company will clearly explain the reasons.
The Company's applications or website may contain links to third-party social networks, platforms, and websites. While the Company strives to link only to sites with adequate personal data protection standards, it cannot be responsible for the content or data protection standards of other sites. Personal data you provide to third-party websites is collected by those parties and governed by their own privacy policies. We recommend reviewing their policies separately.
If you have questions or wish to exercise your rights, please contact:
ServerToday (Thailand) Co., Ltd.
111/128 Moo 2, Ratchaphruek Rd., Bangraknoi, Mueang Nonthaburi, Nonthaburi 11000
DPO Team
111/128 Moo 2, Ratchaphruek Rd., Bangraknoi, Mueang Nonthaburi, Nonthaburi 11000
This Privacy Notice is governed by and interpreted in accordance with Thai law. Thai courts shall have jurisdiction over any dispute that may arise.
The Company regularly reviews this Privacy Notice to ensure consistency with practices and applicable laws. Any significant changes will be communicated through appropriate channels along with the updated version. We recommend checking this notice periodically.
This notice is effective as of May 6, 2025
Download Document ID: ISMS-1PC-006