The protection of your personal data is of great importance to TC Car Solutions (Thailand) Co., Ltd.(the "Company" or "we").
We process the personal data of individual to whom those regulations apply (referred to as a "you" throughout this privacy policy) in accordance with the applicable the regulation relating to personal data protection, in particular the Personal Data Protection Act B.E. 2562 (“PDPA”). This privacy policy explains how we, as the data controller, process your personal data.

We may collect the following personal data for processing to achieve the purpose as herein provide and process based on the legal bases provided for in the PDPA. In addition, we process your personal data of a sensitive nature, including your religious beliefs and health status, in accordance with special criteria provided for in the Section 26 of the PDPA.

1. Identity data - name, surname, identification card number, passport number, work permit number, driver’s license number, house registration, birthdate, gender, nationality, marital status, photo, online identity (e.g. IP address, cookie, device ID)
2. Contact data - address, telephone/mobile number, email address
3. Transaction data – bank account number, income information, loan balance, credit history, debt payment history, occupation, workplace-department-position
4. Geographic information –  GPS location
5. Information concerning security – CCTV images, video recording

The Company collect and process your Personal Data for the following purpose;

• Contacting
• Concluding the contract
• Providing service
• Suggesting the promotion
• Processing for necessity purpose of the legitimate interests pursued by the Company such as using for internal management.
• Complying with the law and regulation such as Anti-Money Laundering Law and Civil and Commercial Code.
• Exercising or defending legal claims.
• Verifying the suitability of your financial capacity and making credit decisions when engaging in transactions with you and financial review concerning the rental and finance lease activity.
• Engaging in appropriate management as concerns our assets (rental cars, finance lease cars etc.) relating to transactions with you.
• Engaging in appropriate management as concerns under the rental contract or finance lease contract relating to the transaction with you.
• Issuing the bill for payment and collecting debts.
• Claiming from a car accident.
• Improving and facilitating the service.

4.1 The legal basis for the processing is as follows

• When the processing is necessary for the performance of contractual obligations to provide services to you based on the Section 24 (3) of PDPA.
• When processing is required for the pursuit of legitimate interests based on the Section 24 (5) of PDPA.
• When processing is required for compliance with our legal obligations based on the Section 24 (6) of PDPA.
• When your express consent is obtained in advance based on the Section 19 of PDPA.

4.2 You have the right to withdraw your consent at any time by the method separately designated by us at the timing of obtaining your consent. However, your withdrawal of consent will not affect the legality of processing conducted based on your consent before its withdrawal. 

We obtain your personal data directly from you or indirectly through third parties such as those stated below.

• Our customers, agents or service providers
• Our group companies or our business partners
• Government authorities or other publicly available sources, such as company website, information made available on the internet or social media platforms (e.g. Facebook, X, LinkedIn, etc.)

We will retain your personal data for as long as necessary to fulfill the aforementioned purposes for obtaining and processing your personal data. Specific retention periods are decided based on the following considerations, the purpose for obtaining and processing the personal data; the nature of the personal data; and the necessity of retaining the personal data for legal or business reasons.
When the retention period has ended or the retention of such data is no longer necessary (whichever is applicable), we will destroy or erase such data from our system. 

7.1  We may share and disclose your personal data to the following third parties in accordance with the PDPA for the purposes stated in this privacy policy. The Company will inform you to acknowledge and request for consent as necessary and required by the PDPA.

1. Our parent company and affiliated companies
2. Our suppliers, agencies, and service providers, such as
   • Mobile application company
   • System maintenance and management service company
   • Security services company
   • Invoice delivery service company
   • Systems development companyCar maintenance and car repair company
3. Financial institutions, banks, collection agents, professional advisors, law enforcement agencies, insurers and credit agencies.
4. Government and regulatory authorities or any organizations to which the Company is under an obligation to make disclosures under the requirements of any law and regulations.
    

7.2  As a result of the aforementioned sharing and disclosure, in some cases your personal data will be transferred to the third countries outside Thailand. In such a case, we will implement appropriate safeguards by executing with the transferee the standard data protection causes including Binding Corporate Rules or Data Processing Agreement (if any or whichever is appropriate) pursuant to the PDPA, unless the data transferred country has appropriate data protection standard as prescribed by the Personal Data Protection Committee or we obtain your consent pursuant to the PDPA. If you wish to receive a copy of documentation related to these safeguards, please inquire using the contact details at the end of this privacy policy.

You have the following rights regarding personal data obtained and processed by us.

• Obtaining information regarding processing of data: You have the right to obtain from us all the requisite information regarding our data processing activities that concern you.
• Access to personal data: You have the right to obtain from us confirmation as to whether personal data concerning you are being processed, and, if so, then access to the personal data and certain related information.
• Rectification or erasure of personal data: You have the right to have us rectify inaccurate personal data concerning you without undue delay and the right to have us complete any incomplete personal data. Also, if certain conditions are satisfied, you will have the right to have us delete personal data concerning you without undue delay.
• Restriction on processing of personal data: If certain conditions are satisfied, you will have the right to have us restrict processing of personal data concerning you.
• Objection to processing of personal data: If certain conditions are satisfied, you will have the right to object to processing of personal data concerning you.
• Data portability of personal data: If certain conditions are satisfied, you will have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format and the right to transfer those data to another controller without hindrance from us.
• Right to rectification: If you believe that the personal data we collect or process is wrong, you have the right to ask for such data to be rectified.

If you intend to exercise any of the aforementioned rights, please inquire using the contact details at the end of this privacy policy. 
You can lodge a complaint in relation to our processing of your personal data with the expert committee under PDPA.

 We amend this privacy policy from time to time. We will contact you through this website and by e-mail if necessary, when we make any substantive or material amendments.

For questions or inquiries regarding this privacy policy, please contact the data controller or data protection officer below.

Data protection officer
TC Car Solutions (Thailand) Co., Ltd.
1550 Thanapoom Tower 22nd Floor, New Petchburi Rd., Makkasan, Ratthawi, Bangkok 10400
Tel: +66 (0) 2037 6333
E-mail: dpo@tccars.co.th