Infra Corporation Group
Infra Corporation Group recognizes the importance of protecting personal data. This privacy policy outlines the methods of collecting, using, disclosing, and managing your personal data (collectively referred to as “data processing”), whether collected through the company’s website, applications, other online platforms, or directly from the data owner under any circumstances.
Scope of the Privacy Policy
This privacy policy applies to users of the website/application, customers purchasing products or services from the company, office visitors, and participants in any company activities (collectively referred to as “the company” or “we”).
Personal Data
Personal data refers to any information that can identify the data owner, either directly or indirectly, including names, addresses, profile pictures, emails, phone numbers, device information (IP Address), purchasing behavior, preferences, and lifestyle information.
Special Cases
If you are a business partner, ally, or job applicant, please read the specific privacy policy section relevant to you.
Privacy Policy Overview
This privacy policy includes the following sections:
- Types of personal data the company collects
- Purposes for collecting your personal data
- How the company collects your personal data
- How the company processes your personal data
- Types of entities the company shares and discloses your personal data with
- Retention period of your personal data
- Your rights and how to exercise them
- How the company protects your personal data
- Changes to the privacy policy
- How to contact the company
Types of Personal Data Collected
Depending on your relationship with the company, the company may collect various types of personal data, including:
- Contact information: name, postal code, email, and phone number
- Personal information: gender, age, government-issued ID details, CCTV footage
- User account information: login details, email, and other data provided through the user account
- Financial information: salary
- Consent information with affiliates or business partners
- Service usage behavior: customer usage data on websites or platforms, product and service usage, location data during project visits, preferences, or feedback
- Data collected through electronic systems and similar technologies, including log files and IP addresses
Sensitive Data
In some cases, the company may collect sensitive data, including religion, race, ethnicity, and criminal records, which will only be collected with your explicit consent unless legally permitted otherwise.
Third-Party Data
If you provide personal data of third parties to the company, the company assumes you have the authority to provide such data and that the third party has consented to the use of their personal data as outlined in this policy.
Purposes of Collecting, Using, Disclosing Your Personal Data
- To fulfill your requests, such as registering for information and promotions. The company will collect and use basic information like name, email, and phone number for contact purposes.
- To improve website and application performance, develop marketing plans, analyze usage data, evaluate services, and enhance the company’s products and services.
- To communicate relevant information about products and services, including benefits, promotions, or changes to the privacy policy.
- To fulfill contractual obligations, including sharing location data with service providers.
- To comply with legal requirements, such as preventing harm or conducting research with appropriate safeguards.
- For other purposes as notified during data collection or related to any of the above objectives.
Processing Legal Basis
The company processes your personal data based on the following legal bases:
- Consent
- Marketing communications: the company will seek your consent for marketing purposes.
- Data transfer abroad: the company will seek your consent to transfer data to countries with lower personal data protection standards.
- Sensitive data: the company will use your consent for specific purposes like health data for event catering, religion for suitable facilities, race or nationality for statistical reports, and criminal records for fraud prevention.
- Contractual Basis
- The company may process your data to fulfill your requests or contracts, including verifying qualifications, maintaining contractual obligations, and confirming your identity.
- Legitimate Interests
- The company may process your data for security, internal management, improving products and services, marketing communications, event photography, and maintaining legal documentation for legal entities.
- Legal Obligations
- The company processes data to comply with legal reporting requirements, cooperate with law enforcement, and retain computer traffic data.
Data Sharing and Disclosure
The company may disclose or transfer personal data to the following entities for the purposes stated in this policy:
- Infra Corporation Group: Sharing data within the group for necessary business purposes.
- External Service Providers: Processing data on behalf of the company for purposes like website management, product delivery, marketing, and payment processing.
- Business Partners: Sharing data for joint promotional activities or offering partner products and services.
- Legal Obligations: Complying with legal requirements, including disclosures to authorities, courts, or legal mandates.
Data Retention
The company retains personal data as necessary to fulfill the stated purposes or as required by law. The company has a retention schedule to ensure data is deleted or anonymized when no longer needed.
Your Rights
Under the Personal Data Protection Act B.E. 2562, you have the following rights:
- Access to your data and how it is processed.
- Correction of inaccurate or incomplete data.
- Deletion, destruction, or anonymization of data.
- Suspension of data processing.
- Data transfer to another data controller.
- Objection to processing based on legitimate purposes.
- Withdrawal of consent at any time.
The company may collect, use, or disclose your personal information according to other legal principles. If you wish to exercise your rights, inquire about issues, or file a complaint regarding the processing of personal data that is not lawful, you can submit your request to exercise your rights via email to hr.info@infraplus.co.th. The company may require you to verify your identity before providing services according to your request. The company will respond in writing via email as soon as possible, typically within 30 days from the date the request is received, along with clear and sufficient supporting information from you.
However, the company reserves the right to deny your request to exercise your rights if such rights fall under any legal exceptions. Generally, the company does not charge a fee for handling such requests. Still, if the company considers your request to be unfounded or excessive, it reserves the right to charge a reasonable fee for processing the request.
Additionally, you have the right to file a complaint with the Data Protection Committee if the company denies your request and you believe the denial is unjustified, or if the company does not respond to your request within the specified time frame.
How does the company protect your personal information? The company has implemented appropriate physical and technical security measures to protect personal data from unauthorized or unlawful processing, destruction, loss, damage, or alteration, whether accidental or unlawful. This includes measures to prevent unauthorized use, disclosure, or access to personal data, such as limiting the group of individuals who can access personal data, restricting the types of personal data that can be accessed, and enforcing disciplinary measures in case of unauthorized use or disclosure.
Changes to the privacy policy The company reserves the right to amend this policy for any reason deemed appropriate, including compliance with laws, government policies, regulations, and similar obligations. Any changes will be announced on the company’s website at www.infracorporation.co Changes to the privacy policy will take effect on the date the new policy is announced.
How can you contact the company?
The “company” is considered the data controller under the Personal Data Protection Act B.E. 2562. If you have any questions or wish to exercise your rights, you can contact the company at the following address
To: People Public Relation
address: INFRA PLUS CO.,LTD.
188/70 Zywalk Building, D16 (3-4 Floor), D17 Charatmueang Road, Wang Mai, Pathumwan, Bangkok, 10330 Thailand
E-mail: hr.info@infraplus.co.th
