Privacy Policy

“Vivace khaoyai Resort” places great importance on the protection of your personal data. This privacy policy outlines the practices related to the collection, use, or disclosure of personal information, as well as the rights of the data subjects, in accordance with data protection laws.

Collection of Personal Information

We will collect personal information directly from you through the following channels:

Types of Personal Information Collected

Personal Information such as name, surname, age, date of birth, nationality, ID card number, passport, etc.

Contact Information such as address, phone number, email, etc.

Account Information such as user account, usage history, etc.

Proof of Identity such as a copy of ID card, passport, etc.

Transaction and Financial Information such as purchase history, credit card details, bank account, etc.

Technical Information such as IP address, Cookie ID, website usage history (Activity Log), etc.

Other Information such as images, motion pictures, and any other data considered as personal information under data protection laws.

Minors

If you are under 20 years old or have legal limitations, we may collect, use, or disclose your personal information. In such cases, we may require your parents’ or legal guardians’ consent, or as permitted by law. If we become aware of the collection of personal information from minors without parental or guardian consent, we will take steps to delete that information from our servers.

Methods of Collecting and Storing Personal Data

We will store your personal data in both physical and electronic formats. The following are the methods through which we collect and store your personal data:

Processing of Personal Data

We will collect, use, or disclose your personal data for the following purposes:

Disclosure of Personal Information

We may disclose your personal information to others with your consent or as permitted by law, as follows:

Internal Organizational Management

We may disclose your personal information within the company as necessary for the improvement and development of our products or services. We may collect internal data for various products or services under this policy for your benefit and the benefit of others.

Retention Period of Personal Data

We will retain your personal data for as long as necessary while you are a customer or have a relationship with us or for the period necessary to achieve the purposes related to this policy. We may need to keep the information afterward if required by law. We will delete, destroy, or anonymize the information when it is no longer necessary or at the end of the specified retention period.

Rights of the Data Subject

Under data protection laws, you have the following rights:

Right to Withdraw Consent

If you have given consent, we will collect, use, or disclose your personal information based on that consent. You have the right to withdraw your consent at any time.

Right to Access

You have the right to request access to your personal data held by us and to request a copy of that information. You may also request information on how we obtained your personal data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and the right to request that we transmit your personal data directly to another controller where technically feasible. You also have the right to request that we transfer or transmit your personal data in this format directly to another controller, unless it is technically impossible to do so.

Right to Object

You have the right to object to the collection, use, or disclosure of your personal data at any time if the collection, use, or disclosure of your personal data is carried out for operations necessary for our legitimate interests or for the performance of a task carried out in the public interest, unless such processing is justified by compelling legitimate grounds or is necessary for the establishment, exercise, or defense of legal claims.

Right to Erasure/Destruction

You have the right to request the deletion or destruction of your personal data or to make your personal data unidentifiable. This right applies when you believe that your personal data is collected, used, or disclosed unlawfully, or when we no longer need to keep your personal data for the purposes outlined in this policy, or when you have withdrawn your consent or objected as mentioned above.

Right to Restriction of Processing

You have the right to request the temporary suspension of the processing of your personal data in cases where we are reviewing your request to exercise your right to rectify your personal data or your right to object, or in other cases where it is deemed unnecessary to process your personal data but you prefer us to suspend processing instead.

Right to Rectification

You have the right to request the correction of your personal data to be accurate, up-to-date, complete, and not misleading.

Right to Lodge a Complaint

You have the right to lodge a complaint with the relevant authority if you believe that the collection, use, or disclosure of your personal data is in violation of or not in compliance with applicable laws. You can exercise your rights as the data subject above by contacting our Data Protection Officer at the contact details provided at the end of this policy. We will respond to your request within 30 days from the date we receive your request. If we deny your request, we will notify you of the reasons for the denial through various channels, such as messages (SMS), email, phone calls, letters, etc.

Advertising and Marketing

We may send information or newsletters to your email with the purpose of offering things of interest to you. If you no longer wish to receive communications from us via email, you can click on the “Unsubscribe” link in the email or contact us through our email.

Personal Tracking Technology (Cookies)

To enhance your user experience and make it more efficient, we use cookies or similar technologies to develop accessibility to products or services, provide relevant advertising, and track your usage. We use cookies to identify and track website users and their interactions with our website. If you do not want cookies stored on your computer, you can set your browser to reject cookies before using our website. Ensuring the Security of Personal Data We will maintain the confidentiality, integrity, and availability of your personal data to ensure its security. This is to prevent loss, unauthorized access, use, alteration, correction, or disclosure. We implement security measures covering administrative safeguards, technical safeguards, and physical safeguards to control access and use of personal data.

Personal Data Breach Notification

In the event of a personal data breach, where there is a high risk to your rights and freedoms, we will notify the Personal Data Protection Commission within 72 hours of becoming aware of the breach, if feasible. We will also communicate the breach to you promptly, along with mitigation measures, through various channels such as our website, text messages (SMS), email, phone, or mail. Policy Amendments We may make temporary amendments to this policy. You can stay informed about the terms and conditions of the policy that has been amended through our website. This policy was last updated on January 1, 2024.

Privacy Policies of Other Websites

This privacy policy is only applicable to offering products, services, and usage on our customer-facing websites. If you visit other websites through our site, data protection policies on those sites will apply, and we are not responsible for them.