The Stock Exchange of Thailand

For the translation purpose only

1. Definition

“You”	means the data subject whose Personal Data are processed by SET Group, including but not limited to investors, securities holders, website users, customers, investment professionals, staff, personnel, agent or broker, and other persons relating to the activities or the operations of SET Group.
“SET Group”	means the Stock Exchange of Thailand (“SET”) and the Companies in SET Group.
“Companies in SET Group”	means the companies established by SET or the subsidiaries of SET, in which SET holds more than 50 (fifty) percent of the registered capital, whether directly or indirectly.
“Personal Data Protection Laws”	means Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and its relevant subordinate laws, including any amendments which may be made thereto in the future.
“Personal Data”	means any information relating to a natural person, which enables the identification of such natural person, whether directly or indirectly, but not including the information of the deceased person in particular, pursuant to the Personal Data Protection Laws.
“Process” or “Processes” or “Processing”	means any operation performed on Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure (by transfer, dissemination or otherwise making available), alignment, combination, restriction, erasure or destruction.
“Data Controller”	means a natural person or a juristic person having the power and duties to make decisions regarding the collection, use, or disclosure of the Personal Data.
“Data Processor”	means a natural person or a juristic person who operates in relation to the collection, use, or disclosure of the Personal Data pursuant to the orders given by or on behalf of a Data Controller, whereby such natural person or juristic person is not the Data Controller.

2. General Provisions

This Privacy Notice is provided to clarify the details and methods on how SET Group handles the information that we received from you, the purposes for the collection, use, disclosure, and processing, including the retention period of such Personal Data, and your rights as the data subject. As SET Group conducts business in Thailand, the processing of your Personal Data shall therefore fall under the compliance of and is required to comply with Thailand’s Personal Data Protection Laws accordingly.

3. About SET Group

With respect to the details in relation to SET and the Companies in SET Group (please click here)

SET Group will process and keep protecting your Personal Data in accordance with the details as described in this Privacy Notice.

4. The methods to collect and receive your Personal Data

4.1 SET Group collects and receives your Personal Data via the following methods:

(a) Personal Data which you directly provide to SET Group : You may directly provide your Personal Data to SET Group. This case usually occurs when you contact SET Group to make enquiries, complete forms either by online or by document, apply for services or join activities, request for information, receive marketing communications, or provide comments or feedback to SET Group, etc.

(b) Personal Data which SET Group automatically collect from you : SET Group may automatically collect some technical information, in relation to your devices, activities and visiting patterns and browsing history, by using Cookies and other similar technologies. For more details, please see Cookies Policy

(c) Personal Data which SET Group receives from third parties : SET Group may, from time to time, receive your Personal Data from third parties, such as the Securities and Exchange Commission, issuer of securities, asset management companies, securities companies, brokers, agents, banks, service providers, job recruiters, government organizations, contracting parties and professionals, personnel of SET Group and candidates.

4.2 In collecting your Personal Data, you will be informed of details set out in this Privacy Notice, including but not limited to, the lawful basis for the collection, use, disclosure and/or processing of Personal Data in accordance with the lawful purposes, or in the event that the Personal Data Protection Laws require your consent to be provided, SET Group will request for your explicit consent in order to process your Personal Data.

5. Collected Personal Data

5.1 Personal Data which SET Group collects and processes under this Privacy Notice is the Personal Data of the following categories of data subject:

(a) Customers and Investors, , i.e., natural persons who are securities holders, website visitors, service recipients, seminar participants, and other persons who contact SET Group to request information or services from SET Group, regardless of whether such Personal Data was directly or indirectly received.

(b) Contracting Parties, Professionals and other persons relating to the business of SET Group, i.e., natural persons who are contracting parties or contractually related with SET Group, including business partners, sellers, suppliers, service providers, contractors, advisers, investment professionals, and other similar persons.

(c) Personnel of SET Group, i.e., natural persons who are staff, employees or persons who work for SET Group, directors, managers, executives, professionals, and persons who directly receive monthly salaries, wages, benefits, or any other types of compensation from SET Group, including the family members of such personnel of SET Group.

(d) Candidates, i.e., natural persons who submit an application or details relating to their profile to SET Group, either in the form of written or verbal, with the purpose to apply for the job, internship/scholarship as staff or employees/interns/scholarship applicants of SET Group who are not yet chosen by SET Group, including the family members of such candidates and references.

5.2 Your Personal Data which is collected and processed under this Privacy Notice, regardless of whether such Personal Data was directly provided by you to SET Group or automatically collected from you by SET Group, or was provided to SET Group by third parties, such as

(a) Personal Data, such as first name, last name, date/month/year of birth, age, gender, identification number and copy of passport or ID card, signature, nationality, marital status, and family members information.

(b) Sensitive Personal Data, such as religion, criminal record, health data, health examination result, disability, and biometric data.

(c) Contact details, such as address, telephone number, e-mail, social media contact details, and details of emergency contacts.

(d) Financial information, such as bank account number, and information regarding various types of tax.

(e) Information regarding Securities/Derivatives, such as securities and derivatives trading account number, interest or dividend information, securities deposit-withdrawal information, securities transfer or changing of securities holders, and securities pledging information.

(f) Information regarding the use of systems of SET Group, such as information regarding the registration or subscription for using SET Group’s systems (e.g., SET Member system, Investor Portal system, CRM system, Prof. Link system, SET Registration system, etc.), user account, account profile, username, password, and PIN (if any), information showing on account profile page and services applying page, information in your account profile that edited or amended by you, information received from other accounts that SET Group has a reasonable cause to believe that you are controlling such other accounts, service usage information, all interests and all comments that you express through systems of SET Group (if any), your activities participation information in systems of SET Group, survey information, information received from your communication with SET Group or SET Group’s working team.

(g) Technical information, such as the information of access to SET Group’s websites and systems, computer traffic data (Log), contact and communication information between you and other users, information from using records e.g., device indicator, computer IP address, device identification number, type of device, mobile phone network information, connecting information, geological information, browser category, system access record, information of referring application or website, use of system record, login log information, transaction log information, customer behavior information, system access statistics, access time, your searching information, the use of functions in systems, and information that SET Group collects through the use of Cookies or other similar technologies.

(h) Academic, Training, and Work Experience information, such as academic and training background, academic certificate or transcript, result or raking of points, level of education, language skills, professional licenses information, registration number, registration starting date, registration expiration date, registration renewal information, duty performance information, work starting date, information of training and test provided by SET Group or other relevant organizations, diploma, certificate, work experiences, monthly salaries or wages.

(i) Other information, such as photograph and/or voice recording by means of closed circuit television (CCTV), photograph, footage, video, voice recording of conversations and tendency information of goods or services purchasing

5.3 In the event that SET Group collected your Personal Data before the Personal Data Protection Laws come into force, SET Group will continue processing such Personal Data in accordance with the Personal Data Protection Laws, and will continue to collect and use your Personal Data pursuant to the original purpose for which you have given your consent to SET Group. In case you no longer wish SET Group to collect and use such Personal Data, you may inform SET Group to request for the withdrawal of your consent at any time.

6. Purposes and legal basis for collection, use and disclosure of Personal Data

6.1 SET Group processes your Personal Data for the following purposes (collectively referred to as “Specified Purposes”) and under the following legal basis:

necessary for the performance of a contract which you have entered into as a party with the SET Group or for complying with your request prior to entering into such contract;
for compliance with the law by SET Group;
necessary for the legitimate interest of SET Group, or other persons or juristic persons other than SET Group;
necessary for the performance of a task carried out in the public interest by SET Group, or for exercising of official authority vested in SET Group;
for preventing or suppressing danger to life, body or health of a person;
for the achievement of purposes relating to research or statistics, for which suitable safeguard measures to protect your rights and freedom have been implemented;
consent which you have given to SET Group, where exceptions or legal basis specified above cannot be relied on, or according to the cases specified in the table below. In the case that SET Group has specifically requested consent from you for any Personal Data, SET Group will process such Personal Data pursuant to the purpose which you have been informed of and consented to, and SET Group will only process any Personal Data which constitutes sensitive Personal Data in the case that SET Group is able to do so under the laws or has obtained explicit consent from you.

Purposes

Legal basis for processing

(a) To comply with the duties under the relevant laws or regulations to which SET Group is subject.

In order to comply with the relevant laws, regulations and rules, as well as to perform the duties as set out in laws and regulations relevant or applicable to SET Group, including but not limited to laws on securities and exchange, laws on derivatives, laws on taxation, laws on labor protection, laws on computer crime and Personal Data Protection Laws, of which both enforceable as of the present and to be amended or added in the future.

The use of your Personal Data is necessary to the performance of duties of SET Group in accordance with laws relevant applicable to SET Group, including complying with court orders.

(b) To provide the services as a securities and derivatives trading center, to monitor the trading of securities, derivatives and group companies, to develop various systems that are essential to providing convenience in trading securities, and to ensure that SET Group can efficiently provide such services to you and other persons

To provide a system for trading securities and derivatives to business operators in the capital market, as well as other related services;
To provide the services as a securities and derivatives trading center;
To provide a system or funding portal, and to develop the electronic system for trading securities in the nature of an OTC Trading Platform for startups and SMEs, such as the LiVE system;
To provide a payment infrastructure system for the capital market;
To provide various systems, websites or applications services related to the trading of securities and derivatives, such as SET Member system, Invest Now system, SETLink system, CRM system, Digital Gateway system, SET Registration system, Settrade system (Streaming and Streaming for Fund), e-Open Account service, and e-KYC service;
To provide a call center services, and to examine and verify your identity in order to proceed with your requests or inquiries;
To record photographs, footages, video and voice recording of conversations during the provision of services of SET Group.