of the Hydro-Informatics Institute (Public Organization)
The Hydro-Informatics Institute (Public Organization) has provided the Personal Data Protection Policy with a view to establish principles; mechanisms; as well as regulatory measures, regarding the collection; storage; usage; or disclosure, of Personal Data for operations of the Institute in accordance with the Personal Data Protection Act, B.E. 2562 (2019)
1. Definitions
“Institute” means the Hydro-Informatics Institute (Public Organization);
“Person” means a natural person;
“Personal Data” means any information relating to a Person, which enables the identification of such Person, whether directly or indirectly, but not including the information of the deceased Persons in particular;
“Sensitive Personal Data” means Personal Data pertaining to racial, ethnic origin, political opinions, culture, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or of any data which may affect the data subject in the same manner, as required by laws.
2. Source and Collection of Personal Data
The Institute may obtain the following Personal Data, whether directly or indirectly, by collecting from data subjects through the use of the services, provision of services, participation in activities or work performances under the Institute’s missions.
2.1 Personal Data which enable the identification of such Person, such as first name, last name, original affiliation, email address, phone number, contact address, social media account, photographs, as well as work and education relating data, Sensitive Personal Data, and family members’ Personal Data of that data subject.
2.2 Computer traffic data which are automatically stored technical data, whether through the use of Cookies, Web beacons, and computer traffic data files (log files) or any other data, including:
• Configuration information generated by web browsers or any other programs used to access electronic platform services of the Institute, including the IP Address, version and serial number of the devices;
• Information obtained by searching or browsing while using electronic platform services of the Institute, such as text search, information details, and accessed contents.
By collecting such personal data, the Institute shall determine the collected items as necessary and appropriate for the Personal Data processing and in accordance with the context of the use of the services, provision of services, participation in activities or work performances under the Institute’s missions, through the Privacy Notice in each case.
3. Purposes of Personal Data Processing
The Personal Data collected by the Institute shall be used for the Personal Data processing under the following purposes:
3.1 To be used in work performances under the Institute’s missions, which are set forth in the objective of the Institute establishment under the Royal Decree on Establishment of the Hydro-Informatics Institute (Public Organization) B.E. 2562 (2019) or other laws related to the Institute’s missions and authorizing the Institute to do;
3.2 To enable the Institute and its contracting parties to perform their fulfillment of agreements;
3.3 To be used for the services or activities required by law to request for the consent from data subjects and the data subject has given the explicit consent;
3.4 To be used for compliance with relevant laws or for legitimate interests, such as submission of name and contact information of external stakeholders of the Institute to the Office of NACC for the Integrity and Transparency Assessment of the institute’s operations, CCTV cameras installation within the Institute’s work area for security, compliance with court orders, disclosure of Personal Data under the Official Information Act, B.E. 2540 (1977);
3.5 To be use for preventing or suppressing a danger to life, body, or health of Persons;
3.6 To be used for preparation of the historical documents or the archives for public interest, or for the purpose relating to research or statistics.
Such purposes on Personal Data processing shall be stated in the Privacy Notice prescribed by
the Institute in accordance with the context of the use of the services, provision of services, participation in activities or work performances under the Institute’s missions.
4. Processing of Personal Data
The Institute shall process Personal Data by performing with Personal Data or sets of Personal Data, either by automatic means, such as:
– Collection, recording, organization, structuring, storage, alteration or modification;
– Acquiring, considering, using, disclosing by forwarding, publishing, or any other actions causing its availability;
– Placement or combination, restriction, erasure or disposal;
regarding the purposes on Personal Data processing and which are stated in the Privacy Notice, under the context of the use of the services, provision of services, participation in activities or work performances under the Institute’s missions.
In the event that the Institute desires to process Personal Data for purposes other than the purposes on Personal Data processing prescribed herein, the Institute shall inform the data subject and request for an explicit consent prior to taking any actions on such Personal Data.
5. Retention and Retention Period of Personal Data
The Institute shall retain Personal Data under the measures of the Personal Data security protection required by laws for preventing unauthorized persons from accessing to such Personal Data, and refraining from Personal Data loss, or unauthorized access to the Personal Data for use, destruction, alteration, correction, or disclosure of such Personal Data.
In this regard, the Institute shall retain Personal Data for the period prescribed by laws relevant to the Personal Data, or stated in the Privacy Notice, under the context of the use of the services, provision of services, participation in activities or work performances under the Institute’s missions.
6. Rights of the Data Subject
The data subject shall have any rights as the following:
6.1 Right to withdraw consent – The data subject is entitled to withdraw his or her consent on the processing of Personal Data, of which the data subject has given to the Institute, at any time that Personal Data are under the supervision of the Institute. In this regard, withdrawal of the consent shall not affect the collection, use, or disclosure of Personal Data that the data subject has already given the consent.
However, the right to withdraw consent of the data subject may be restricted, in case that the Institute uses such Personal Data on a legal or contractual basis;
6.2 Right of access to Personal Data – The data subject is entitled to access to his or her Personal Data and request for obtaining copies of such Personal Data from the Institute, as well as to request the disclosure of the acquisition of the Personal Data obtained by the Institute without his or her consent;
6.3 Right to rectification of Personal Data – The data subject is entitled to request the Institute to correct inaccurate Personal Data or complete his or her Personal Data;
6.4 Right to erasure of Personal Data – The data subject is entitled to request the Institute to erase his or her Personal Data for any reasons;
6.5 Right to restriction of processing of Persona Data – The data subject shall have the right to restrict the use of his or her Personal Data for any reasons;
6.6 Right to portability of Personal Data – The data subject is entitled to request the Institute to transfer the Personal Data, which the data subject has given to the Institute, to other Data Controllers or such a data subject for any reasons;
6.7 Right to object to the processing of Personal Data – The data subject shall have the right to object the processing of the Personal Data for any reasons.
7. Use of Cookies
By using electronic platform service of the Institute, cookies or similar technologies may be provided to enhance security measures and maintain session preferences, as well as to help remember data of browsers and settings of those who access the electronic platform service of the Institute. The users accessing the electronic platform service of the Institute may accept or decline cookies by setting or removing cookies manually from the settings in the web browser.
8. Review of the Personal Data Protection Policy
The Institute shall have the right to update or review this Personal Data Protection Policy in order to comply with its practices and laws relevant to the Personal Data protection. In such case, the Institute shall provide the notification through the Institute’s website or any other means it deems appropriate.
9. Contact
Hydro-Informatics Institute (Public Organization)
Address: 901 Ngam Wong Wan Road, Lat Yao, Chatuchak, Bangkok, 10900, THAILAND
Telephone: 0 2158 0901
Fax: 0 2158 0910
E-mail: dpo @ hii.or.th
————————————————————————-