“You” |
means the data subject whose Personal Data are processed by SET Group, including but not limited to investors, securities holders, website users, customers, investment professionals, staff, personnel, agent or broker, and other persons relating to the activities or the operations of SET Group. |
“SET Group” |
means the Stock Exchange of Thailand (“SET”) and the Companies in SET Group. |
“Companies in SET Group” |
means the companies established by SET or the subsidiaries of SET, in which SET holds more than 50 (fifty) percent of the registered capital, whether directly or indirectly. |
“Personal Data Protection Laws” | means Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and its relevant subordinate laws, including any amendments which may be made thereto in the future. |
“Personal Data” | means any information relating to a natural person, which enables the identification of such natural person, whether directly or indirectly, but not including the information of the deceased person in particular, pursuant to the Personal Data Protection Laws. |
“Process” or “Processes” or “Processing” | means any operation performed on Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure (by transfer, dissemination or otherwise making available), alignment, combination, restriction, erasure or destruction. |
“Data Controller” | means a natural person or a juristic person having the power and duties to make decisions regarding the collection, use, or disclosure of the Personal Data. |
“Data Processor” | means a natural person or a juristic person who operates in relation to the collection, use, or disclosure of the Personal Data pursuant to the orders given by or on behalf of a Data Controller, whereby such natural person or juristic person is not the Data Controller. |
This Privacy Notice is provided to clarify the details and methods on how SET Group handles the information that we received from you, the purposes for the collection, use, disclosure, and processing, including the retention period of such Personal Data, and your rights as the data subject. As SET Group conducts business in Thailand, the processing of your Personal Data shall therefore fall under the compliance of and is required to comply with Thailand’s Personal Data Protection Laws accordingly.
With respect to the details in relation to SET and the Companies in SET Group (please click here)
SET Group will process and keep protecting your Personal Data in accordance with the details as described in this Privacy Notice.
4.1 SET Group collects and receives your Personal Data via the following methods:
(a) Personal Data which you directly provide to SET Group : You may directly provide your Personal Data to SET Group. This case usually occurs when you contact SET Group to make enquiries, complete forms either by online or by document, apply for services or join activities, request for information, receive marketing communications, or provide comments or feedback to SET Group, etc.
(b) Personal Data which SET Group automatically collect from you : SET Group may automatically collect some technical information, in relation to your devices, activities and visiting patterns and browsing history, by using Cookies and other similar technologies. For more details, please see Cookies Policy
(c) Personal Data which SET Group receives from third parties : SET Group may, from time to time, receive your Personal Data from third parties, such as the Securities and Exchange Commission, issuer of securities, asset management companies, securities companies, brokers, agents, banks, service providers, job recruiters, government organizations, contracting parties and professionals, personnel of SET Group and candidates.
4.2 In collecting your Personal Data, you will be informed of details set out in this Privacy Notice, including but not limited to, the lawful basis for the collection, use, disclosure and/or processing of Personal Data in accordance with the lawful purposes, or in the event that the Personal Data Protection Laws require your consent to be provided, SET Group will request for your explicit consent in order to process your Personal Data.
5.1 Personal Data which SET Group collects and processes under this Privacy Notice is the Personal Data of the following categories of data subject:
(a) Customers and Investors, , i.e., natural persons who are securities holders, website visitors, service recipients, seminar participants, and other persons who contact SET Group to request information or services from SET Group, regardless of whether such Personal Data was directly or indirectly received.
(b) Contracting Parties, Professionals and other persons relating to the business of SET Group, i.e., natural persons who are contracting parties or contractually related with SET Group, including business partners, sellers, suppliers, service providers, contractors, advisers, investment professionals, and other similar persons.
(c) Personnel of SET Group, i.e., natural persons who are staff, employees or persons who work for SET Group, directors, managers, executives, professionals, and persons who directly receive monthly salaries, wages, benefits, or any other types of compensation from SET Group, including the family members of such personnel of SET Group.
(d) Candidates, i.e., natural persons who submit an application or details relating to their profile to SET Group, either in the form of written or verbal, with the purpose to apply for the job, internship/scholarship as staff or employees/interns/scholarship applicants of SET Group who are not yet chosen by SET Group, including the family members of such candidates and references.
5.2 Your Personal Data which is collected and processed under this Privacy Notice, regardless of whether such Personal Data was directly provided by you to SET Group or automatically collected from you by SET Group, or was provided to SET Group by third parties, such as
(a) Personal Data, such as first name, last name, date/month/year of birth, age, gender, identification number and copy of passport or ID card, signature, nationality, marital status, and family members information.
(b) Sensitive Personal Data, such as religion, criminal record, health data, health examination result, disability, and biometric data.
(c) Contact details, such as address, telephone number, e-mail, social media contact details, and details of emergency contacts.
(d) Financial information, such as bank account number, and information regarding various types of tax.
(e) Information regarding Securities/Derivatives, such as securities and derivatives trading account number, interest or dividend information, securities deposit-withdrawal information, securities transfer or changing of securities holders, and securities pledging information.
(f) Information regarding the use of systems of SET Group, such as information regarding the registration or subscription for using SET Group’s systems (e.g., SET Member system, Investor Portal system, CRM system, Prof. Link system, SET Registration system, etc.), user account, account profile, username, password, and PIN (if any), information showing on account profile page and services applying page, information in your account profile that edited or amended by you, information received from other accounts that SET Group has a reasonable cause to believe that you are controlling such other accounts, service usage information, all interests and all comments that you express through systems of SET Group (if any), your activities participation information in systems of SET Group, survey information, information received from your communication with SET Group or SET Group’s working team.
(g) Technical information, such as the information of access to SET Group’s websites and systems, computer traffic data (Log), contact and communication information between you and other users, information from using records e.g., device indicator, computer IP address, device identification number, type of device, mobile phone network information, connecting information, geological information, browser category, system access record, information of referring application or website, use of system record, login log information, transaction log information, customer behavior information, system access statistics, access time, your searching information, the use of functions in systems, and information that SET Group collects through the use of Cookies or other similar technologies.
(h) Academic, Training, and Work Experience information, such as academic and training background, academic certificate or transcript, result or raking of points, level of education, language skills, professional licenses information, registration number, registration starting date, registration expiration date, registration renewal information, duty performance information, work starting date, information of training and test provided by SET Group or other relevant organizations, diploma, certificate, work experiences, monthly salaries or wages.
(i) Other information, such as photograph and/or voice recording by means of closed circuit television (CCTV), photograph, footage, video, voice recording of conversations and tendency information of goods or services purchasing
5.3 In the event that SET Group collected your Personal Data before the Personal Data Protection Laws come into force, SET Group will continue processing such Personal Data in accordance with the Personal Data Protection Laws, and will continue to collect and use your Personal Data pursuant to the original purpose for which you have given your consent to SET Group. In case you no longer wish SET Group to collect and use such Personal Data, you may inform SET Group to request for the withdrawal of your consent at any time.
6.1 SET Group processes your Personal Data for the following purposes (collectively referred to as “Specified Purposes”) and under the following legal basis:
Purposes |
Legal basis for processing |
(a) To comply with the duties under the relevant laws or regulations to which SET Group is subject.
|
The use of your Personal Data is necessary to the performance of duties of SET Group in accordance with laws relevant applicable to SET Group, including complying with court orders. |
(b) To provide the services as a securities and derivatives trading center, to monitor the trading of securities, derivatives and group companies, to develop various systems that are essential to providing convenience in trading securities, and to ensure that SET Group can efficiently provide such services to you and other persons
|
The use of your Personal Data is necessary for:
|
(c) To provide the services as a securities depository, securities registrar, and clearing house, and to ensure that SET Group can efficiently provide such services to you and other persons
|
The use of your Personal Data is necessary for:
|
(d) To promote the development of investment and capital market knowledge, and to ensure that SET Group can efficiently provide such services to you and other persons
|
The use of your Personal Data is necessary for:
|
(e) To contact and communicate, marketing communications, perform data analytics and improve the services of SET Group in order to respond to your service requests, inquiries, or suggestions, and to ensure that SET group can efficiently provide such services to you and other persons
|
The use of your Personal Data is necessary for:
The SET Group will send you marketing communication messages only when you subscribe to receive marketing communication or when you consent to receive marketing communication. |
(f) To manage human resource in order to enable SET Group to determine the most appropriate decision about recruitment and human resource management
|
The use of your Personal Data is necessary for:
|
(g) To conduct procurement and to retain a positive professional relationship between SET Group and you (or the organization you represent)
|
The use of your Personal Data is necessary for:
|
(h) To implement security measures
|
The use of your Personal Data is necessary for the legitimate interest of SET Group or other persons or juristic persons. |
(i) To carry out other purposes that SET Group have notified you at the time of collection of Personal Data
SET Group will notify you of any other purposes that SET Group needs to use your Personal Data apart from the specified purposes mentioned above, or when SET Group wishes to modify its former Specified Purposes or when it is necessary for SET Group to specifically obtain your consent for the processing of your Personal Data, by contacting you via the contact details given to SET Group. |
|
6.2 As the Personal Data which SET Group will process for the Specified Purposes as stated in Clause 6.1 above relates to the compliance with the laws or contracts or is necessary for entering into a contract with you, whereby, such Personal Data is necessary for the achievement of such Specified Purposes, if you do not provide such Personal Data to SET Group, there may be a legal impact or SET Group may not be able to perform its legal obligation under the contract entered into with you or may not be able to enter into a contract with you (as the case may be). In such case, SET Group may be required to decline to enter into a contract with you or terminate the relevant services to you, partly or entirely.
6.3 In the case that SET Group intends to use your Personal Data for a purpose not specified above, SET Group will provide an additional privacy notice to explain the use of Personal Data for such purpose. You should read such additional privacy notice along with this Privacy Notice.
7.1 SET Group may disclose your Personal Data under the Specified Purposes and in accordance with the laws and regulations to the following entities and persons:
(a) SET and the Companies in SET Group, including their staff, employees, directors, managers or personnel of SET Group as deemed relevant and necessary (on a need-to-know basis), for the processing of your Personal Data;
(b) Government organizations, regulating authorities according to the laws, such as the Securities and Exchange Commission, Bank of Thailand, Office of the Official Information Commission, Office of Insurance Commission, Department of Provincial Administration, Revenue Department, Department of Business Development, and Department of Intellectual Property;
(c) The organizations requesting for the disclosure of information by virtue of the laws, such as requesting information for the prosecution or legal prosecution, or relating to the legal proceedings, for example, Anti-Money Laundering Office,the National Anti-Corruption Commission, Royal Thai Police, Department of Special Investigation, Office of the Attorney General, and the courts;
(d) Associations relating to the capital market business in Thailand, such as Thai Listed Companies Association, Association of Thai Securities Companies, Association of Investment Management Companies, Thai Bankers Association, Securities Analysts Association and the Thai Investors Association;
(e) Issuer of securities, member companies, securities companies, asset management companies and brokerage firms;
(f) Alliances, business partners, service providers, service recipients and Data Processors assigned by SET Group to be responsible of providing services or managing of Personal Data, such as improving or maintaining the security standard of the systems and the technology system, payment systems, audit, human resource management or other services which may be beneficial to you.
7.2 The disclosure of your Personal Data to third parties shall be in accordance with the Specified Purposes or other purposes permitted by laws, provided that if the law requires your consent, SET Group will request for your explicit consent in advance.
7.3 In the event that SET Group discloses your Personal Data to third parties, SET Group will put in place appropriate safeguards to protect the Personal Data that has been disclosed and to comply with the standards and duties relating to the protection of Personal Data as prescribed by the Personal Data Protection Laws.
7.4 In the event that SET Group sends or transfers your Personal Data outside Thailand, SET Group will ensure that the recipient country, the international organization or such overseas recipient has a sufficient standard for the protection of Personal Data. In some cases, SET Group may request your consent for the transfer of your Personal Data outside Thailand, subject to the requirements under the Personal Data Protection Laws.
7.5 As SET Group may be required to disclose your Personal Data to other regulating authorities, e.g., the Securities and Exchange Commission, Bank of Thailand, Anti-Money Laundering Office etc., if you wish to know more details regarding the processing of your Personal Data carried out by such regulating authorities, please refer directly to the privacy notice of such relevant regulating authorities.
8.1 SET Group will retain your Personal Data for the period necessary to fulfil the Specified Purposes for which the Personal Data was processed, whereby the retention period may be changed depending on the Specified Purposes for which such Personal Data was collected and processed.
8.2 SET Group will also retain Personal Data for the period prescribed under the applicable laws, having regard to the business practices in relation to each category of Personal Data. After the aforementioned retention period, SET Group will delete such Personal Data from the storage or systems of SET Group without prior notice to you.
SET Group has no intention to serve minors as specific targeted groups. However, owing to the manner of organization, products and services of SET Group, SET Group may, occasionally, collect and process the Personal Data of the person who is under 20 years old. In such event, SET Group will comply with the Personal Data Protection Laws in relation to the processing of Personal Data of minors, including asking consent from the legal representative or guardian as prescribed by the Personal Data Protection Laws.
As the data subject, you have the following rights in relation to your Personal Data, subject to the rules, methods and conditions under the Personal Data Protection Laws. In this regard, if you wish to make a request to exercise your rights, you can contact SET Group by using the contact details set out below in Clause 13 (How to contact SET Group) of this Privacy Notice.
10.1 Right to Access
You have the right to access your Personal Data and may request SET Group to provide you with a copy of such Personal Data in accordance with the requirements under the Personal Data Protection Laws, including to disclose how the SET Group receive your Personal Data, which is collected, used and disclosed by the SET Group without requiring of your consent, to the extent permitted by the Personal Data Protection Laws.
10.2 Right to Data Portability
You have the right to obtain your Personal Data in the format which is readable or commonly used by ways of automatic tools or equipment, including to request to send or transfer your Personal Data to another Data Controller or to you, unless it is technically unfeasible to do so. Your rights to data portability shall be in accordance with the requirements under the Personal Data Protection Laws.
10.3 Right to Object
You have the right to raise an objection to the processing of your Personal Data, and SET Group will conduct so in case that the SET Group;
(a) processes your Personal Data based on our or third parties’ legitimate interest or public interest, except in the event that the SET Group can demonstrate compelling legitimate grounds, or the processing of your Personal Data is carried out for establishment, compliance with or exercise of the legal claims or defense of the legal claims;
(b) processes your Personal Data for the purpose of direct marketing; or
(c) processes your Personal Data for the purpose of scientific, historic or statistic research, unless it is necessary for conducting activities for the public interest of SET Group.
In the event that you object to the processing of Personal Data, please kindly inform us whether you wish to delete your Personal Data or to restrain SET Group from processing such Personal Data.
10.4 Right to Erasure
You may request SET Group to delete, destroy or anonymize your Personal Data in certain circumstances as follows:
(a) There is no further necessity to retain your Personal Data according to the Specified Purpose for processing your Personal Data;
(b) You withdraw your consent which is the basis of collecting and processing the Personal Data, and SET Group has no legal ground for collecting or processing such Personal Data;
(c) You object to the processing as mentioned in Clause 10.3; or
(d) The collecting or processing of your Personal Data is unlawful.
The abovementioned cases shall not apply to the processing that is necessary for the purpose of freedom of expression, preparing of the historic or statistic documents, performing a task carried out in the public interest, complying with the law for achieving purposes with respect to preventive medicine or occupational medicine or public interest in public health, establishment, compliance with or exercise of the legal claims or defense of the legal claims or compliance with the law.
10.5 Right to Restriction
You have the right to request a restriction to the processing of your Personal Data in certain circumstances as follows:
(a) SET Group is pending the verification of the accuracy of Personal Data as per your request;
(b) In case of Personal Data which shall be deleted or erased according to Clause 10.4 that you request a restriction to the use instead;
(c) SET Group has no further necessary to use your Personal Data, however, you have a necessity and therefore request SET Group to retain such Personal Data, for establishment, compliance, or exercise of the legal claims, or for defense of the legal claims; or
(d) SET Group is pending the verification according to Clause 10.3 (a) or Clause 10.3 (c) in order to reject your objection request pursuant to Clause 10.
10.6 Right to Rectification
You have the right to request that your Personal Data be rectified if the Personal Data is inaccurate, not up-to-date or incomplete, or may cause a misunderstanding.
10.7 Right to Withdraw Consent
In the event that SET Group relies on your consent as the legal basis for processing your Personal Data, you have the right to withdraw such consent which has been provided to the SET Group at any time that such Personal Data is in the possession of the SET Group.
10.8 Right to Lodge a Complaint
If you have any concerns or questions about any aspect of SET Group’s practices in relation to the processing of your Personal Data, please contact SET Group using the contact details set out in Clause 13 (How to contact SET Group) of this Privacy Notice. In case of an alleged infringement of Personal Data Protection Laws, you have the right to lodge a complaint to the Office of Personal Data Protection Committee.
SET Group will apply our best effort of the capability of the relevant systems to facilitate and carried out at your request without delay, unless it appears that to carry out at such request causes undue burden on or would involve excessive or disproportionate effort of SET Group or is in the risk of violating of the protection of others’ Personal Data or illegal or impossible to perform such request.
SET Group have in place and/or adopt the Personal Data storage systems, which has appropriate mechanism and technique and security standard according to the Personal Data Protection Laws and the relevant regulations, including the limitation of access of your Personal Data by staff, employees and representatives of SET Group for the purpose of preventing your Personal Data from the unauthorized usage, disclosure, erasure or access.
Provision of services of SET Group may link to websites, applications, products and services of third parties, which such third parties may collect certain information in relation to the use of such service. This Privacy Notice is solely applied to the processing of Personal Data under the purpose specified by SET Group. SET Group could not be responsible for the security or privacy or any of your information collected by websites, applications, products and services of such third parties, even you click the link appeared on the service of SET Group. In this regard, you should be careful and verify the privacy notice or privacy policy of websites, applications, products and services of such third parties.
If you have any questions in relation to this Privacy Notice, or would like to exercise your rights as set out in this Privacy Notice, please kindly use the contact form published on the website of SET Group https://www.set.or.th/en/privacy-center.html. Also, you could contact SET Group through the Data Protection Officer of SET Group by using the following details;
This Privacy Notice shall be governed by and construed in accordance with Thai laws, and Thai courts shall have jurisdiction over any dispute that may arise out of or relate to this Privacy Notice.
SET Group may make changes to this Privacy Notice from time to time, in order to reflect any changes to our processing of your Personal Data, and to comply with changes to the Personal Data Protection Laws or any applicable laws. In this regard, SET Group will notify you of any significant changes to the Privacy Notice through appropriate means. Nevertheless, SET Group encourages you to review the Privacy Notice for any changes from time to time.
This Privacy Notice shall be effective from 1 June 2022
Last updated on May 2022 (Version 3.0)