1. Purpose of this policy

This Privacy policy explains to you, as a data subject how we will collect, use and share your personal data and set out your legal rights in relation to your personal data.

‍

2. Type of data that we will collect, process and disclose and how is your personal data collected?

Your personal data that we collect, use and/or disclose are such as:

• Personal information such as name, surname, title, gender, date of birth, identity card number, passport number, country of domicile and nationality, User Profile Picture, occupation
• Contact data such as address, email addresses, phone numbers, Username
• Technical and usage data  such as IP Address, Cookies, Browser type, Browser version, Visited page, User Log
• Financial and Transaction Data such as payment status, payment order, status of transaction
• Micro-credential/LU  Learning Units (LU)  status such as Records of assessment outcomes, including details of summative assessments submitted, examinations taken, your comment or feedback and Digital Badge

‍

3. The purpose of collecting, processing your personal data are as following

The data collected and processed may include:

• To fully deliver any particular service or product offered by us and to manage your relationship with us
• To administer and protect our business and this website (including troubleshooting, and logging to comply with legal)
• To process data for the earning micro-credential process including account signup, login, logout submit evidence
• To issue the awarded micro-credential to the global certificate platform.
• To process data for the payment and validation of transaction status and to comply with financial law
• To perform customer care service by various channels
• To subscribe news and marketing updates from our platform
• To meet any legal or regulatory requirements relating to our provision of services and products and any disclosure requirements of any applicable law, regulation, direction, court order, by-law, guideline, circular or code binding upon our policy

‍

4. Where your personal data is collected from

Your personal data is collected from the following sources:

• You – you may provide data when you access at our platform

          • when registering/signup page, 

          • when registering an interest in subscriptions/News/Events or volunteering opportunities

          • when submitting evidence for assessment

          • when contacting us by clicking “Support” button

          • when surfing or accessing our website via Browser’s cookies/ Internet tags

• Cookies are small text files that we place in your computer or device to store your preferences. They help us personalize your experience when you return to our website, and they are required for certain portions of our website. Your internet browser via other Tracking Technologies may also transmit to us and/or its appointed third-party vendor similar information, such as the URL of the website you just visited. We uses Cookies and Tracking Technologies to:

          • help us remember and understand your preferences based on previous or current website activity which enables us to provide you with improved services

          • process the items/details entered by you in sign up forms (register interest)

‍

5. The chance of Sharing your personal data with others as following (3^rd party disclosure)

We may disclose your Personal Data to other persons or entities to the extent permission under your consent, agreement or law. Your personal data provided to us will be kept confidential and where we consider it is necessary or appropriate for the purposes of data storage or processing or providing any service or product on our behalf to you, we may transfer your personal data to our partner within or outside Thailand, under conditions of confidentiality and similar levels of security safeguards you hereby consent to such disclosure and transfer of your personal data and authorize the release of your personal data to the following categories of third parties:

• our business partners and affiliates who may be providing the services or products in connection with our business, for instance digital badge and certificate platform;
• any bank or financial institution connected via the use of any of your credit card or debit card in any transactions made with us;
• auditors, consultants, lawyers, insurance companies, banks and other financial advisors, information technology software vendors, event organizers and other professional advisors appointed by us to provide services to us or on our behalf;
• any government agencies, statutory authorities, local councils, industry;

‍

6. Securing your personal data

We have implemented technical measures and procedural measures to safeguard in the Personal Data processing and preventing Personal Data breach. Your personal data is held securely within our platform. Access to the data is controlled. Staff processing the data receive relevant training on data protection and information security.

‍

7. The duration for retaining your data with us

We will keep your Personal Data for as long as necessary while you are a customer or under relationship with us, or for as long as necessary in connection with the purposes set out in this Policy, unless law requires or permits longer retention period. We may erase, destroy, or anonymize the Personal Data when it is no longer necessary or when the period lapses. However, you can use your rights as described below where applicable by conditions.

‍

8. Your Data Subject Rights  

Privacy legislation gives you a number of rights as further described in this section

8.1. Right to be informed

We shall inform the data subject, prior to or at the time of the collection of the personal data, of the required details (e.g., the purpose of the collection, the data retention period, and the rights of the data subject), except in cases where the data subject already knows of such details. We may consider and modify as appropriate this Privacy Notice to ensure that your Personal Data is well protected.

8.2. Right to access

You have the right to request a copy of the personal information at 4Lifelonglearning.org that holds of yours. To do this please contact us as detailed below to request your rights to access. You may be asked for proof of identity so we are sure you are who you say you are.

8.3. Right to rectification

The data subject has the right to have incomplete, inaccurate, misleading, or not up-to-date his/her personal data that the data controller collects, uses, and discloses rectified.

8.4. Right to be forgotten

The data subject has the right to request the data controller to delete or de-identify his/her personal data that the data controller collects, uses, and discloses, except where the data controller is not obligated to do so if the data controller needs to retain such data in order to comply with a legal obligation or to establish, exercise, or defend legal claims.

8.5. Right to object to the collection, use, or disclosure of Personal Data

The data subject has the right to object to certain collection, use, and disclosure of his/her personal data such as objecting to direct marketing.

8.6. Right to data portability

The data subject has the right to obtain the personal data that the data controller holds about him/her, in a structured, electronic format, and to send or transfer your data in machine readable format.

8.7. Right to restrict processing

PDPA gives individuals the right to restrict the processing of their personal data.  If consumers exercise this right, businesses can continue to store the data but must not use or process that data.

8.8. Other Rights

        8.8.1 Right to withdraw consent

        Your personal data may be used for direct marketing at any time and we will stop as soon as your objection is received. You may object to process your         personal data in certain circumstances but may need to provide details of your particular situation. 

        8.8.2 Right to lodge complaint

        The data subject has the right to lodge a complaint to the competent authority where he/she believes that the collection, use, and disclosure of his/her personal data is unlawful or non-compliant with the PDPA.

        If you wish to exercise any of these rights, please send your request to the Data Protection Officer via email at (4lifesupport@mail.kmutt.ac.th) or our “Support” button on website. Your request will be dealt with within 1 month.

‍

9. How to contact us

If you have any questions or are unhappy with how we have used your personal information, you can contact the Data Protection Officer by email:

        (4lifesupport@mail.kmutt.ac.th) or by writing to them at our address.

        KMUTT Micro-Credential Office
        Educational Development Zone
        CB4 Level 8, Bangmod Campus,
        KMUTT, Bangkok 10140

        Facebook: KMUTT4Life

10. Changes to this notice

This Notice may be amended or updated. Where this occurs, we will announce the change on our website. Once this has been done, you will be deemed to have accepted the change.