Privacy Policy

Kia Sales (Thailand) Co., Ltd.’s Privacy Policy

1. Terms

* Unless otherwise stated herein, “you” means the data subject

2. Personal data collected, used and disclosed by the company:

2.1 Personal data in general

We will collect the following personal data (including sensitive data set forth in Personal Data Protection Act and by the Committee) which are given to us by the data subject or which we obtain from operations and the provision of services:

(a) Name, surname, ID card number, date of birth, age, occupation, sex, marital status, photo, fixed line telephone number, mobile phone number, address shown on house registration, mailing address, passport number, email address, Line ID, credit card number, IP address, financial information related to the use of the service and purchase of products from the company, contents in which you are interested, purchase and service purchase orders and other data related thereto.

(b) Non-personal data on searches collected from browsers, domain names, web address and application logs for customer support

(c) System information, specifically cookies, beacons, logged-in files, scripts (see more details in our policy on cookies), IP address, type of browser, domain name, history of visits, time of use, referenced websites, records of your searches and use of applications while visiting our website

(d) Location information means data from GPS, Wi-Fi, compass, accelerometer, IP address and public posts indicating location information

2.2 Sensitive Data

In the sale of products and the provision of services, we may collect sensitive data, including data on ethnicity, religion, philosophy, sexuality, disabilities, labor union membership, biodata and health, for use in operations to attain our objectives, with the prior consent of the data subject.

If we do not want to use any sensitive data, e.g. copy of ID card, we will ask you to delete it, or we will delete it.

(Unless otherwise specifically stated herein, personal data and sensitive data shall be collectively referred to as “personal data”.)

3. Collection of Personal Data

We collect the following personal data:

3.1 The following personal data on product purchases, visits, contacts or dealings with us is directly collected from data subject:

(a) Verbal and written data on the purchase of products or the use of services (“products” or “services”), joining membership, registrations, communications and documents and applications therefor, irrespective of which party makes the first contact.

(b) Data on your contact with any member of staff, customer service provider, salesperson, agent, broker, contractor, trading partner, attorney-in-fact, other persons or divisions of our company; use of our media, website, applications, or social media; contact by telephone, email, meeting, interviews, SMSs, fax, postal mail or other methods for the purchase of products or services, complaints or other purposes.

(c) Personal data sent by the data subject to us to participate in marketing campaigns, competitions, draws and events held by us, our staff or trading partners.

3.2 Personal data collected by us from other sources:

Personal data collected by us from state agencies, finance companies and groups, financial service providers, business alliances, the credit bureau and information service providers, subject to your prior consent as required by law, unless it is otherwise necessary to collect, use or disclose such personal data as required by law, including the personal data from:

(a) group of companies

(b) third parties, e.g., representatives, dealers, shops, data collection service providers, trading partners and business alliances

((c) public and non-public records legally available

(d) visits to websites, e.g., data on Internet service provider, IP address, date and time of visit, pages opened, MAC address, cookies, ID, IMEI

(e) logs of application usage

(f) state and regulatory agencies

We usually collect personal data directly from you, but sometimes, with your prior consent, may collect personal data from other sources; if necessary, we may collect, use and disclose such personal data as required by law.

We collect, use, disclose and process the personal data of minors as required by law.

4. We collect, use and disclose personal data for the following purposes:

4.1 sale of products and services, provision of post-sale services, improvement of our present and future products and services, maintenance and other related activities

4.2 making transactions, visiting website or use of our mobile application as required by you

4.3 making transactions related to our products and services, e.g., registering for membership, payment, engaging in activities and lodging complaints

4.4 maintaining the relationship between you and the company

4.5 identifying subject of personal data at the time of using services or contact with us

4.6 notifications and communications with us and receiving information on changes from us

4.7 carrying out instructions of subjects of personal data

4.8 introducing products, services, sales promotions, rights and benefits; making transactions related to our services

4.9 data analysis, audit, product development, revision of services, service analysis, survey of sales promotion, assessment of our performance and expansion of our business

4.10 taking any actions necessary and appropriate for auditing and prevention of violations of the law, as requested by states or governments, including those in the countries where subjects of personal data live; application of terms and conditions of services and privacy policy; protection of data of the data subjects, our business, privacy, properties, staff, other people; remedies, prevention and minimization of possible loss and damage;

4.11 compliance with the laws; investigations by officials and regulatory agencies in compliance with the laws, rules and regulations.

We shall notify you of any other purposes not listed herein at the time of collection of personal data.

We shall collect, use and disclose your personal data according to the purposes set forth under Article 4, under the following terms and conditions:

1. where you have granted prior legal consent

2. when necessary to ensure compliance with the provisions under the agreement with you, or to carry out your instructions

3. when necessary for health and safety, and prevention of deaths or injuries

4. when necessary for operations, the public benefit and when required by state agencies

5. when necessary for the benefits of our company or other person or juristic entity, except when such benefits are less important than your basic rights to your personal data

6. when necessary to ensure compliance with the law

7. when necessary for the documentation of history, archives, studies or statistics, provided measures are applied to protect your rights and liberty

5. Disclosure and Transmission of Personal Data

5.1 Disclosure of Personal Data

We shall keep personal data confidential, except when necessary to attain certain objectives, and may disclose personal data to certain parties for the reasons specified as follows:

(a) Trading Partner/Party to Contract: We may disclose personal data to our trading partners or contractors for sales promotion, statistical analysis or online activities, provided the recipients do not use such personal data for any other purposes.

(b) Vendor/Broker: For specific purposes, e.g., credit card processing, we may share your personal data with vendors or brokers, e.g., a payment gateway company.

(c) Government, agencies or organizations: We may share your personal data when necessary to comply with the law, an order, a request or in cooperation with various agencies on matters related to legal compliance.

(d) We may share your personal data with other persons or agencies where permitted under the applicable laws.

(e) We may share your personal data with other persons for the attainment of said objectives, with your prior consent.

5.2 Transmission of Personal Data Overseas

In the course of our operations, we may have to send your personal data kept on our server/cloud to a company or group of companies or any person in the country where you work. If such country lacks measures for the protection of personal data, we will ensure that the personal data shall be transmitted as required by law, with measures for the protection of personal data such as requiring the recipient to protect such personal data. If the recipient is a company or a group of companies, we may adopt a policy on personal data auditing and certification by legally authorized persons and transmit such personal data according to such policy instead of the laws.

6. Duration and Place of Personal Data Storage

For certain purposes and when it is necessary, we may retain your personal data for a certain period beyond the term of our contract with you as required to address any legal dispute, in compliance with the laws and regulations, as follows:

6.1 Customers who Make Purchases

We will keep the data of customers who buy our cars for 10 years as proof of sale and purchase for after-sales services.

6.2 Customers who Tried Products

We will keep the personal data of customers who inquire about our products or test-drive our cars for up to 5

6.3 Customers Using Our Website

We will keep the personal data of customers who use our website for up to 5 years..

At the end of the data retention period, we will delete or destroy such data or remove all personally identifying information according to our data disposal policy.

7. Use of Personal Data for Marketing Purpose

Other than those purposes and in compliance with the law, we shall use your personal data for direct and indirect marketing purposes, e.g., introduction of products, services and promotions by postal mail, email or other method so that you will gain higher benefits from being our customer.

You may opt out of receiving such sales promotions and choose to receive only necessary communications.

8. Personal Data Protection

To prevent unauthorized use or disclosure of your personal data by a data recipient, we shall administratively, technically and physically safeguard such personal data to ensure the confidentiality, integrity and availability thereof according to our current and future policies, rules and regulations.

We physically and electronically safeguard your personal data by limiting access thereto, and allow only certain employees or representatives to use such personal data for the introduction of products according to our privacy protection policy.

At the time of entering into a contract or an agreement with any third party, we set forth the measures for the protection of personal data and confidentiality to ensure that the personal data we handle are safe.

9. Rights to Data Subject

You should know your rights under the law and our privacy protection policy and the revisions thereof. You may request to exercise your rights under the provisions of the laws and this Policy and its future revisions.

9.1 Withdrawal of Consent

If you have consented to us collecting, using and disclosing your personal data before or after the application of a personal data protection law, you may withdraw such consent during the time for which your personal data is retained by us, unless the provisions of the law or the contract otherwise forbid you from doing so.

9.2 Access to Data

You shall have access to your personal data that is retained by us. You may request us to submit a copy of such data to you together with an explanation of how we obtained such data without your consent.

9.3 Data Transmission

If we put your personal data in a format that can be read and used by some devices, you may request us to submit such data automatically to you or to other data controller, except in the event of technical errors.

9.4 Objection

If we collect, use and disclose your personal data for our benefit or the benefit of another person, you may raise an objection at any time. However, we may continue to collect, use and disclose your personal data if we can prove that we have the right to do so in compliance with the law or if legal actions are being taken.

9.5 Request for Deletion of Data

You may request us to delete or destroy your personal data or to remove all personally identifying information if you believe that we have collected, used or disclosed your personal data illegally or that we no longer need your personal data for the purposes set forth hereunder, or when you withdraw your consent or raise an objection as mentioned above.

9.6 Request for End of Data Usage

You may request us to suspend the use of your personal data during the time at which we are investigating your request for revision of personal data or your objection or in the event that we no longer need to use your data and you prefer that we suspend its use to the deletion or destruction of such data.

9.7 Revision of Data

You may revise or update your personal data to ensure its correctness and completeness and avoid misunderstanding.

9.8 Complaint

You may complain to the competent agency if you believe that your personal data have been collected, used and disclosed illegally.

9.9 Exercising Rights

You can exercise your rights by completing an application form and submitting it to the relevant agency, subject to limitations under the applicable laws. In some cases, we may not comply with your request if it is in conflict with the law or a court order for the public benefit, or if your actions may infringe the rights and liberty of other persons. If we do not comply with your request, we will inform you of the fact./p>

Deadlines for certain actions:

* Deleting or destroying personal data, removing identifying information from personal data or withdrawing consent can only be done in compliance with the provisions of the law or the contract with us. If such actions affect the performance of the contract with us or the provision of service due to inability to identify the data subject, the data subject may not receive services and news from us in the future.

10. Connection to Other Websites

Our website may include links to other websites which have different privacy protection policies. You should study their privacy protection policies before deciding whether or not to disclose your personal data. We shall not be liable for any loss or damage caused by their actions or privacy protection policies.

11. Cookies

We have the same policy on cookies and other technologies with similar functions on our website. This policy provides information on cookies, their functions and how we manage your cookies.

Our website uses cookies to enhance your experience using our website and help us increase the efficiency of our website. Cookies will not harm your devices. The contents of a cookie can only be read or used by the website which has created the cookie.

11.1 Types of Cookies Used by Us and Duration of Cookies Operation

We use 4 types of cookies. These can be described as 1) cookies that are strictly necessary, cookies that have analytical /performance purposes, cookies to enhance website functionality, and targeting cookies. The purposes of these are explained hereunder:

We use first-party cookies and third-party cookies. The former are the cookie files generated and recorded by the website you are visiting. The latter are read by the website which generate and record your data only. Third-party cookies are generated and recorded by a domain which is different from the website you are visiting, and can be shared with other websites independently.

We also use session cookies and persistent cookies. The former remain on your device until you leave our website. The latter will remain on your device until you delete them. How long the cookies will remain on your device depends on the lifetime of such cookies and your browser’s settings.

11.2 Consent

Strictly necessary cookies will always be used on your device for our benefit and safety under the law, once you grant prior consent. If you intend to change your cookies settings or withdraw consent, please study the cookies settings.

11.3 Use of Cookies

When you visit our website, we use the following cookies:

• Strictly necessary cookies to allow you to use our website and access data safely./p>

•Analytical/Performance Cookies that collect data on the use of the website for statistics on user behavior to improve and develop contents on our products, services and website to improve your experience of using our website so that you can easily find the contents you want.

• Functionality cookies that record your language, region and fonts settings and enable us to recognize you when you return so that we can present the contents that you want.

• Targeting cookies for recording web pages you visited and the hyperlinks thereto, including your profile so that we can present interesting products, services and advertisements.

• Third-Party Cookies

Our website and applications may connect with third parties’ websites and applications. You should study their policies on cookies and privacy, which may be different from ours, to understand how they collect and use your data. We shall not be liable to any loss or damage caused by their websites or applications.

11.4 Setting Cookies

You can set how your browser handles cookies as follows:
Cookies Setting in Chrome
https://support.google.com/chrome/answer/95647?hl=en&ref_topic=14666

Cookies Setting in Firefox

https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies

Cookies Setting in Safari

https://support.apple.com/en-ca/guide/safari/sfri11471/mac

Cookies Setting in Internet Explorer

https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d#ie=ie-10

If you clear your cookies, our website may perform less efficiently.

Learn more at www.aboutcookies.org

12. Personal Data Protection Staff

We have personal data protection staff which audit our collection, use and disclosure of personal data to ensure compliance with the Personal Data Protection Act B.E. 2562 (2019) and our policies, regulations, announcements and instructions, liaise with the Personal Data Protection Committee Office and perform other duties according to the Personal Data Protection Act B.E. 2562 (2019).

13. Questions About Privacy Protection Policy

If you want to make any suggestions or ask any questions about our collection, use and disclosure of your personal data and your rights hereunder, you can contact us and our staff at:

[personal data protection staff contacts]

14. Contacts

If you have any questions about our collection, use and disclosure of your data and want to take any actions as per Article 9 of the Personal Data Protection Act, you can contact us at:

Contact the company:

PDPA Working Team

15. Appropriate Authority

16. Revision of Privacy Protection Policy

We may revise this personal data protection policy from time to time when required by law, and will publish such revisions on our website.

17. Kia Privacy Policy – Kia ID (link)

To view the full details of this policy, click the following link. - [KIA ID PRIVACY POLICY]

Effective as of November 29, 2023

Mr. Jun Oh Lee 

President