PRIVACY NOTICE FOR EVENT PARTICIPANTS

Techsauce Media Co., Ltd. (the "Company" or "we") recognize the importance of protecting and maintaining privacy and security of those persons who attend and participate in the Techsauce Global Summit 2023  (“Event”) organized by the Company (“You”), including any activities or workshop contain in the Event. We, therefore, established this Privacy Notice for Event Participants (“Privacy Notice”) to describe how we collect, use and disclose your Personal Data and how we handle and protect such personal data to be in accordance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and any applicable personal data protection laws or sub-regulations that relate to the PDPA. 

We reserve the right to modify this Privacy Notice from time to time, so please review this Privacy Notice periodically to stay informed about this Privacy Notice and before you provide any of your Personal Data to the Company. Any changes to this Privacy Notice will become effective when we post the revised Privacy Notice on our website or communication channels. In case that any modification deprives your rights or privacy in relation to this Privacy Notice, the Company will provide additional notice of significant updates on the Privacy Notice and will first obtain your consent for any additional processing activities of your Personal Data that we did not explain under this Privacy Notice, except as otherwise permitted by law.

“Personal Data” means any information relating to an individual person, which enables the identification of such person, whether directly or indirectly, but not including the information of the deceased persons.

Sources of Personal Data

The Company may collect the Personal Data that receive directly from you through the following actions:

1. When you provide your information to us during the process of purchasing the Event’s ticket or provide your information for the workshop session in our Event.
2. When you register a membership with us.
3. When you request to receive news or updates about the information and promotion of our service or event in the future.
4. When you fill-in the survey about your interest and satisfaction you have with our Event.
5. When you communicate with us for more detail about the Event via our contact channels such as telephone, email or other applicable channels that you can reach us.
6. When you visit the website operated by us and submit your information to us.

In addition, we may also collect your Personal Data from the other available sources that not directly from you, such as:

1. A social media platform that you publicized your Personal Data, such as Facebook.
2. Search engines or any public sources available on the internet.
3. Our business partners that you willingly provide your Personal Data.
4. Government authorities or any public sources that are available by government agencies.

Types of Collected Personal Data

The Company shall collect Personal Data within the purpose, scope, lawful and fair methods as is necessary which is stipulated in the scope of the Company’s business operation and related to the purpose of hosting and preparing the Event. The Personal Data that the Company collects shall be including but not limited to:

• Identification data e.g., name, surname, signature photos, identification card/ tax identification number, motion picture, voice record. 
• Contact data e.g., mailing address, telephone number, email address.
• Occupation data e.g., position title, position level, department, company name.
• Technical data e.g., IP address, Cookie ID, activity log.
• Health data e.g., vaccination status. (We collect this type of data for the purpose of preventing contagious disease or epidemic that can harm the other participant of the Event.)
• Other relevant data e.g., any information that you voluntarily submitted to us that contained information that considered to be personal data such as testimonial, feedback, comments, information appeared on any submitted documents related to booking and attending the Event or any information that you provided while participating in the workshop session, etc. 

We may collect, use or disclose your Personal Data that is specially categorized as sensitive personal data under the PDPA only if by law when we have obtained explicit consent from you or where necessary for us as permissible under the PDPA or relevant law. The sensitive personal data that the Company may collect, use or disclose from you may include religion, biometric data, health and medical data (vaccination status), and any data which may affect you in the same manner as prescribed by the Personal Data Protection Committee of the PDPA. The sensitive personal data collected by us will only be used for the purpose related to the preparation of the Event.

If you fail to provide us with your personal data which is necessary for us to use for the Event preparation or reserve your seat for the workshop session in the Event (if any), such as your name-surname and tax identification numbers, we may not be able to allow you to attend the Event or we may not be able to contact you to provide more information about our services that you discussed with us at the event(s).

Purposes of Processing Personal Data

The processing of your Personal Data as indicated in this Privacy Notice is for the following purposes:

• To register and verify the identity of the participant that is allowed to attend the event or participate in the workshop session.
• To register the membership with us, including the approval and verification process that related to the membership registration
• To manage, plan, prepare and organize the Event such as to prepare the workshop session that suitable for your participation. 
• To deliver you a ticket for attending the Event, including the issue of receipt or tax invoice regarding the purchase of the Event’s ticket.
• To provide you customer service in relation to the Event, and general administration of your attendance at the Event and workshop session.
• To conduct business planning, reporting and for any internal management purposes.
• To provide you with information about the Event for which you have registered, such as event updates, and possible changes, cancellation or similar information.
• To inform marketing activities, invitations of our activities including to offer any products and services that you may be interested in via the contact channels you provided to us.
• To ask you for your feedback or review after you participate in our Event.
• To film and photograph the Event which will be used for marketing purposes and to promote the Event on our website, social media channels and in any marketing materials. 
• To improve our services, marketing, customer relationships and experiences.
• To comply with preventive measures in order to prevent the spread of contagious disease, such as the preventive measure for the spread of coronavirus disease (COVID-19).
• To comply with any applicable law or regulatory requirements that the Company has a duty to comply with.

As we may photograph and film an event(s) which will be used to market our services and promote future events. In such case, you will be notified if we photograph or film an event(s). If you do not wish to be photographed or filmed at an event(s), please contact our staff in the Event or you can contact us directly by using the detail mentioned in Contact Information.

Legal Basis for Processing Your Personal Data

The Company will process your Personal Data where there is a legal basis to do so. In accordance with the PDPA requirements and provisions, we will lawfully process your Personal Data by relying on the following legal basis:

• It is necessary for the Company to take steps at your request prior to entering into a contract and to perform contractual obligations between you and the Company;
• It is necessary for legitimate interests of the Company or any other persons or juristic persons, except where such interests are overridden by fundamental rights of your personal data;
• It is necessary for the Company to comply with any applicable laws; 
• When the Company obtains your consent or explicit consent (as required by law); and
• It is necessary to protect you and other participants from cross-border dangerous contagious diseases or epidemics which may be contagious or pestilent.

Storage of Personal Data

We will retain your Personal Data in document and electronic form. We store your Personal Data on our company’s server in Thailand and cloud system provided by our service provider located outside Thailand.

Advertising and Marketing

We may send certain information or newsletter for the purpose of offering an interesting offer or detail of future event that you may be interested to attend to you via your email. If you no longer wish to receive communications from us via email, you can click the "unsubscribe" link in the email or contact us via our email.

We do not use automated decision-making without human intervention, including profiling in a way that may cause significant effects on you.

Cookies

Cookies are small files that a site or its service provider transfers to your computer's hard drive through your web browser (if you allow) that enables the site's or service provider's systems to recognize your browser and capture and remember certain information. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.  

If you disable cookies off, some features will be disabled. It will turn off some of the features that make your site experience more efficient and some of our services will not function properly. 

If you would like to learn more about the use of cookies on website operated by us and setting such cookies, you can visit https://summit.techsauce.co/policy/ or you can find details on how to reject or delete cookies as well as general additional information about cookies that can be found at www.allaboutcookies.org.

Disclosure of Personal Data

In certain circumstances, we may disclose your Personal Data for the purposes specified under this Privacy Notice, to the following parties:

Affiliates and Group Company

We may disclose your Personal Data to our affiliate company or group company for the purposes specified under this Privacy Notice.

Service Providers

We may use service providers to assist us in any activities related to purposes specified under this Privacy Notice such as banks, payments gateway providers, ticketing system providers, marketing agencies services, courier services and information technology services. Please note that each service provider has its own privacy notice that will govern the processing of your Personal Data. In addition, if our service providers have acted as a data processor under PDPA, we will conclude a data processing agreement with such service providers to limit the scope of their processing activities and responsibilities they have regarding your Personal Data.

Law Enforcement

Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by government authorities such as the Revenue Department for tax purposes.

Partners 

We may disclose certain Personal Data to our business partners for the purpose of organizing the Event, including for providing information that you may be interested in at the time you participate in the Event.

Business Transfer

In connection with any reorganization, restructuring, merger or acquisition, or other transfer of assets, we may transfer information, including certain your Personal Data, provided that the receiving party agrees to respect your Personal Data in a manner that is consistent with this Privacy Notice and the PDPA.

Cross-border Data Transfer

For the purpose of hosting the Event, we may required to transfer your Personal Data to the entity located outside of Thailand If we do so, we will implement security measures to ensure that your Personal Data is transferred to the destination country that provides adequate safeguard or other procedures as required by the PDPA or its sub-regulation to protect and maintain your Personal Data, and to take steps to ensure that no unauthorized or unlawful processing of your Personal Data in the destination country. In addition, we will ensure that the recipient of your Personal Data will only access your Personal Data and process for the purposes related to what we transfer your Personal Data for.

Retention period of Personal Data

We will retain your Personal Data for as long as necessary for the purposes set out in this Privacy Notice or while you have a relationship with us unless any applicable laws require or permit a longer retention period. However, we may maintain your information for the purpose due to internal retention procedures. We will erase, destroy, or anonymize your Personal Data when it is no longer necessary for us, or when the period permitted by applicable laws has lapsed. 

Data Subject Rights

When you provide your Personal Data to us, you have the rights as a data subject under the PDPA which you can exercise your rights free of charge, under the exception of the law.

Subject to the PDPA thereof, you may exercise any of these rights:

1. Right to withdraw consent: If you have given consent to us to collect, use or disclose your Personal Data whether before or after the effective date of the Personal Data Protection Laws, you have the right to withdraw such consent at any time throughout the period your Personal Data available to us.

However, the withdrawal of consent shall not affect the processing of Personal Data you have already given consent to us legally.

1. Right to access: You have the right to access your Personal Data that is under our responsibility; to request us to make a copy of such data for you; and to request us to reveal how we obtain your Personal Data.
2. Right to data portability: You have the right to obtain your Personal Data if we organize such Personal Data in automatic machine-readable or usable format and can be processed or disclosed by automatic means; to request us to send or transfer the Personal Data in such format directly to other data controllers if doable by automatic means; and to request to obtain the Personal Data in such format sent or transferred by us directly to other data controllers unless not technically feasible.
3. Right to objection: You have the right to object to the collection, use or disclosure of your Personal Data at any time if such doing is conducted for legitimate interests of us, corporation or individual or for carrying out public tasks unless such collection, use or disclosure is within your reasonable expectation.
4. Right to erasure or be forgotten: You have the right to request us to erase, destroy or anonymize your Personal Data if you believe that the collection, use or disclosure of your Personal Data is against relevant laws; or retention of the data by us is no longer necessary in connection with related purposes under this Privacy Notice; or when you request to withdraw your consent or to object to the processing as earlier described.
5. Right to restriction of processing: You have the right to request us to suspend processing your Personal Data during the period where we examine your rectification or objection request; or when it is no longer necessary, and we must erase or destroy your Personal Data pursuant to relevant laws, but you request us to suspend the processing instead.
6. Right to rectification: You have the right to rectify your Personal Data to be updated, complete and not misleading.
7. Right to lodge a complaint: You have the right to complain to competent authorities pursuant to relevant laws if you believe that the collection, use or disclosure of your Personal Data is violating or not in compliance with relevant laws.

You may exercise these rights as the data subject under the PDPA by contacting us or our Data Protection Officer (DPO) as mentioned below. We will notify the result of your request within 30 days upon receipt of such valid request. If we deny the request, we will inform you of the reason via SMS, email address, telephone, registered mail (if applicable).

Data Security Measure

We recognize the importance of maintaining the security of your Personal Data. Therefore, we endeavor to protect your Personal Data by establishing security measures in accordance with the principles of confidentiality, integrity, and availability to prevent the loss, unauthorized or unlawful access, destruction, use, alteration, or disclosure including administrative safeguard, technical safeguard, physical safeguard and access controls. In addition, our staff, employees, business partners and service providers are obliged to maintain the confidentiality of your Personal Data by complying with the data security standards and policies when any of your Personal Data is being used, transmitted, transferred or processed.

Data Breach Notification

In case there is data breach incident occurred in our database, we will notify the Office of the Personal Data Protection Committee without delay and, where feasible, within 72 hours after having become aware of it. If the Personal Data breach is likely to result in a high risk to the rights and freedoms of you, we will also notify the detail of personal data breach and the remedial measures to you without delay through our website, SMS, email address, telephone or registered mail (if applicable).

Contact Information

If you have any questions about this Privacy Notice or would like to exercise your rights, you can contact us by using the following details:

Techsauce Media Co., Ltd.

Address: Techsauce Media Co.,Ltd. (Head Office)

9/173 Soi Santhonburi 29/2, Bangwa, Phasi-Charoen, Bangkok 10160

Email: contact@techsauce.co

Tel:  02-001-5375

Website:  https://techsauce.co/ 

Data Protection Officer (DPO)

Email: dpo-ts@techsauce.co

Tel:  02-001-5375

This Privacy Notice was last updated and effective on May 23, 2022