Privacy policy for Our services
Introduction
WISESIGHT (THAILAND) CO., LTD. and its affiliates include persons involved in the processing of personal data on orders or on behalf of the Company (Hereinafter referred to as the “Company”) prioritize personal data and other data relating to you (Hereinafter referred to as, “data”). The purpose is to provide you with the assurance that the Company is transparent and responsible for collecting, using, or disclosing your information in accordance with the Personal Data Protection Act B.E. 2019 (“Personal Data Protection Act”). including other relevant laws. This Privacy Policy (“Policy”) is designed to provide you with information about our collection, use, or disclosure (Hereinafter referred to as “Processing”) of personal data processed by the Company including officers and related persons acting on behalf of or on behalf of the Company with the following contents:
Scope of Policy
This Policy applies to the data subjects who have made their personal data available to publicly available sources such as, posting, tweeting, commenting, creating threads (“you” or “data subject”) which our services, your personal data may be processed by the Company, officers, contractual employees, business units or other form of entities operated by the Company, as well as contractors or third parties who process personal data on behalf of the Company (“Data Processor”) under products and services such as websites, systems, applications, documents or other forms of services controlled by the Company, for example ZOCIALEYE, WARROOM, INFLUENCER PORTFOLIO, STORE, TREND. (collectively referred to as the “Services”)
In addition to this Policy, the Company may require a privacy notice (“Notice”) for its products or services to inform the data subject who is the user of the personal data being processed, the purposes and lawful basis for the processing, the retention period of personal data as well as the rights to personal data that the data subject may have in a particular product or service.
In the event of a material conflict between the Privacy Notice and this Policy, the Service’s Privacy Notice shall be final.
Our services include aspects where we process the personal data based on instructions or on behalf of our service users, with us acting as their Data Processor. For example, in social listening, where service users define keywords they want to search for in our service, we then process the data according to their instructions, or social monitoring, where service users define the scope of personal data processing they wish to track in order to gain more insights into their customers, etc.
Please note that we do not collect or process personal data with private or technically restricted access. We believe that anything you designate as ‘private’ should be treated with utmost confidentiality.
Definitions
| Personal data | means information about an individual from which an individual can be identified, directly or indirectly, but does not include information of a particular deceased person. |
| Sensitive data | means personal data as provided for in Section 26 of the Personal Data Protection Act B.E. 2562, including race, ethnicity, political opinion, ideology, religion or philosophy, sexual behavior, criminal history, health information, disability, trade union information, genetic information, biological information or any other information that affects the subject of personal data in a similar manner as determined by the Personal Data Protection Commission. |
| Processing of personal data | means any action on personal data such as collect, save, copy, organize, store, update, change, use, restore, disclose, forward, publish, transfer, merge, delete, destroy, etc. |
| Data subject | means a natural person who is a data subject that is collected, used, or disclosed by the Company |
| Data controller | means a person or entity has the authority to make decisions about the collection, use or disclosure of personal data. |
| Data processor | means an individual or a legal entity who is involved in the collection, use or disclosure of personal data on the order or on behalf of the data controller. However, such person or entity is not a controller of personal data. |
Data source
The Company collects or obtains various types of personal data from the following sources:
| From the data subject’s use of the website, other products or services | Information that the Company collects from the data subject’s use of the website, other products or services under contract or under a mission. For example, tracking the behavior of using the website, the company’s products or services through the use of cookies or software on the device of the personal data subject, etc. |
| From other sources | Personal data that the Company collects from sources other than the data subject. Such sources have the authority, have legitimate grounds or have already obtained the consent of the data subject to disclose the information to the Company. |
| From publicly available sources | The personal data that the Company collects from publicly available sources includes, but is not limited to, websites, and online social media through methods such as APIs, in accordance with terms and conditions, such as Facebook, Instagram, Twitter, TikTok, and YouTube, etc. |
In the event the data subject refuses to provide the information necessary to provide the Company’s services, the Company may not be able to provide that service to the data subject in whole or in part.
Collection of personal data
The Company will collect personal data with the prior consent of the personal data subject except in the following cases:
- The company processes your personal data for our legitimate interests and the legitimate interests of our service users. We carefully take into account your rights and the potential impacts on you. A legitimate interest assessment has been conducted to ensure that our personal data processing activities are necessary and proportionate. Our actions do not exceed what you can reasonably expect, and our interests are not override your fundamental privacy right
- To conduct research or statistics in the case of historical documents or archives for the public benefit or related to research studies or statistics in order to provide appropriate safeguards to protect the rights and freedoms of data subjects.
Generally, the Company does not have the intention to process sensitive data, such as religious beliefs, ethnicity, political opinions, sexual orientation, health information, etc. Where we collect your sensitive data, we need an additional lawful basis. We rely on the fact that your sensitive data has been manifestly made public by you.
Types of personal data
In the collection and retention of personal data, the Company utilizes legal and limited methods, strictly in line with the necessary operational purposes of the Company, including but not limited to the following information:
| Social Media account information | e.g. Name, Surname, Username, Profile picture, follower counts, Status, Age, Gender |
| Movement information | e.g. Post, Reaction, Comment, Opinion, Engagement, Photo, Video |
| Other information | e.g. Geolocation, Location, Date and Time, your interests |
Cookies
The Company collects and uses cookies and other similar technologies on websites under its supervision. For example, https://wisesight.com or your device according to the services you use. In order to ensure the safety of the Company’s services and to provide users with a convenient and good experience in using the Company’s services, this information will be used to improve the Company’s website to meet your needs as much as possible. You can manually set or delete the use of cookies from the settings in your web browser.
Purpose of collecting personal data
The Company collects your personal data for several purposes. It depends on the type of product or service or activity you use. as well as the nature of your relationship with the Company or considerations in each context is important. The purposes stated below are just a general framework for the Company’s use of personal data. However, only the purposes related to the products or services you use or are associated with will apply to your information.
- It is to enter into a contract or for the performance of a contract between us and you or third party for your interests;
- It is to perform sentiment analysis, aiming to gain a better understanding of your sentiments and preferences;
- It is to develop and improve the products and services of the Company;
- It is to survey feedback, analyse, research, and gather statistical data for marketing purposes or in order to develop and improve our corporate operations;
- It is for the benefit of management or internal operations of the Company necessary under legitimate interests;
- It is for compliance with the law, investigation process, relevant regulations and our legal duties;
- It is for other purposes upon your explicit consent.
Personal data transfer and disclosure
The Company disclose your personal data to external parties with appropriate security measures in place in the following cases:
- In order to achieve the purposes outlined in this Privacy Policy, the Company may be required to disclose or share information only as necessary to service users by specifying the keywords want to search on our services. The Company will enter into a personal data processing agreement as required by law.
- The Company may disclose or share personal data with affiliated companies. It will only process data for the purposes specified in this Privacy Policy and the Company shall provide appropriate security measures for personal data
- The law or leal process requires disclosure or disclosure to an official, government official or competent authority in order to comply with a legal order or request.
Transferring or sending data to foreign countries
The Company may transmit or transfer personal data to foreign countries. This will ensure that the destination country or the destination authority has adequate privacy protection standards and policies.
Retention Period
The Company will retain your personal data only for as long as it is in our legitimate business interest for the purpose for which the personal data is processed.
Once your personal data is no longer necessary for the aforementioned purposes, the Company will proceed to delete, destroy, or anonymize your personal data, following the standards for data deletion. However, in cases of disputes, the exercise of rights, or legal proceedings related to your personal data, the Company reserves the right to retain such data until a final resolution or judgment is obtained.
Protection of personal data
The Company takes appropriate technical and organizational measures and information security routines to protect and secure the personal data against unauthorized access, disclosure, modification, or unauthorized destruction. These security safeguards include, but are not limited to encrypting information and controlling access to the personal data of specific employees electronically and manually.
External websites or services
The Company’s services may link to third-party websites or services. Such websites or services may have a personal data protection policy that is different from this policy. The company recommends that you study the privacy policy of that website or service to know in detail before using it. However, the Company is not associated with and has no control over the privacy protection measures of such websites or services and cannot be held responsible for the content, policies, damages or actions caused by third party websites or services.
Personal Data Protection Officer
The Company has appointed a Personal Data Protection Officer to examine, supervise, and advise on the collection, use, or disclosure of personal data. It also includes coordinating and cooperating with the Personal Data Protection Commission to comply with the Personal Data Protection Act B.E. 2562.
Right of Data Subject
You can exercise the rights as required by law and as set forth in this notice as follows:
| Right to withdraw consent | You have the right to withdraw your consent at any time unless restricted by law or contractually beneficial to you. However, the withdrawal of consent will not affect the processing of personal data that you have previously given consent to the Company. |
| Right to request access and obtain a copy of personal data | You have the right to request access and obtain a copy of personal data, unless the company has the right to refuse your request by law or court order or your request will have consequences that may harm the rights and freedoms of others. |
| Right to request that personal data be updated | You have the right to request that personal data be updated, correct, complete and not cause misunderstanding. However, the Company can amend the above even if you do not request it. |
| Right to request the erasure or removal or de-identification | You have the right to request the erasure or removal or de-identification of an individual in the following cases:When personal data is no longer necessary keep it for the purposes of collecting, using or disclosing personal data.When you withdraw your consent to the collection, use or disclosure of personal data and the Company has no legal authority to collect, use or disclose personal data further.When you object to the collection, use or disclosure of personal data and the Company has no legal authority to refuse it, unless the Company has legitimate grounds to decline your request |
| Right to obtain or request the transmission or transfer of your personal data | You have the right to obtain or request the transmission or transfer of your personal data in the event that the Company has made the personal data in a readable or generally usable format by means of automated tools or equipment to use or disclose personal data by automatic means unless the technical condition is impracticable or for the benefit of the public or statutory duty or the exercise of infringement against the rights or freedoms of others. |
| Right to objection | You have the right to objection, you have the right to object to the collection, use or disclosure of personal data at any time in the following cases:In the case of personal data which the Company operates under the lawful interest unless the Company demonstrates a more important legitimate cause or to establish a statutory claim, the performance or exercise of a statutory claim or to raise a statutory claim.Direct marketing objectivesTo study scientific, historical or statistical research unless the it is necessary for its mission in the public interest of the Company. |
| Right to request that the use of personal data be restricted | You have the right to request that the use of personal data be restricted in the following circumstancesWhen the Company is in the process of reviewing your request to amend your personal data to be accurate, current, complete and not cause misunderstandings.Personal data that must be deleted or destroyed.When such personal data is no longer necessary because you are obliged to request the retention of your personal data in order to establish a legal claim, compliance or exercising legal claims or countering legal claims.When the Company is in the process of proving its right to refuse a request to object to the collection, use or disclosure of personal data. |
Penalties for non-compliance with the Privacy Policy
Failure to comply with the policy may result in an offense and be subject to disciplinary action in accordance with the Company’s rules (for officers or operators). or in accordance with the personal data processing agreement (for personal data processors). However, it is subject to the case and your relationship with the Company and may be subject to penalties as determined by the Personal Data Protection Act B.E. 2562 along with all secondary laws, rules, regulations, and relevant orders.
Complaints to supervisory authorities
In the event that you become aware that the Company has not complied with the Personal Data Protection Law, you have the right to submit a complaint to the Personal Data Protection Committee or a supervisory authority appointed by the Personal Data Protection Committee or by law. Before making such a complaint, please contact the Company to give us an opportunity to know the facts clarify the issues and resolve your concerns in the first place.
Amendment to the Privacy Policy
The Company may update, amend, or change this Policy at its discretion by notifying you through https://wisesight.com with the effective date of each revised version. However, the Company would like to advise you to regularly check for the latest version of the Policy through specific channels for activities at the Company before you disclose your personal data to the Company.
Access to the Company’s products or services after the enforcement of the new policy constitutes acceptance of the terms of the new policy. Please stop using it if you do not agree with the details in this policy and please contact us for further clarification.
Contacts
Should you have any questions, suggestions, or concerns about the collection, use, and disclosure of personal data by the Company or in relation to this policy or to exercise your rights under the Personal Data Protection Law, you can contact us at
| Data Controller | Data Protection Officer: DPO | ||
| Address: | 123 Suntowers Building B, 33rd Floor, Room B3301-3304, Vibhavadi-Rangsit Rd., Chom Phon, Chatuchak, Bangkok 10900 Thailand | ||
| Phone: | 022741299 | ||
| Email: | legal@wisesight.com, contact@wisesight.com | dpo@wisesight.com | |
