PDPA Image

Privacy Notice

Office of Advanced Science and Technology

The Office of Advanced Science and Technology (hereinafter referred to as the “Science Office”) is a unit of Thammasat University. As a data controller under the Personal Data Protection Act B.E. 2562, the Science Office is aware of and prioritizes the protection of personal data of its users, strictly adhering to the principles of respecting users' privacy rights.

This Privacy Notice is prepared in compliance with the Personal Data Protection Act B.E. 2562. It explains how the Science Office processes personal data of its users, including collection, storage, usage, and disclosure (collectively referred to as “processing”), as well as the rights of personal data owners as follows:

What is Personal Data?

“Personal Data” refers to information related to an individual that can identify that individual either directly or indirectly. This may include a user's name or other information such as first and last name, student ID, position, education level, phone number, email, and supervisor information, which together can identify the user. This data may be stored in various formats such as paper documents and electronic documents.

Legal Basis for Personal Data Processing

Under the Personal Data Protection Act, the Science Office acts as a Data Controller, having the authority to make decisions regarding the collection, use, or disclosure of personal data. The Data Controller must inform users about how it collects and discloses personal data, including the type of data collected, the legal basis or regulations used, the reasons for collection, the sources of data, and any data sharing. The Data Controller has appointed Mr. Chaiyapot Chansaen as the Data Protection Officer. Details Click

Types of Personal Data Collected, Used, or Disclosed

1) User information such as title, first and last name (in Thai and English), position, supervisor information, education level, phone number, email, department name, faculty name, organization name, organization address, or other related information.

2) Research work information such as research project names or other related information.

3) Bank account information such as bank name, branch name, account name, or other related information (including evidence of payment or transfer in computer records and bank Pay-in slips).

4) During the provision of services, the Science Office may record images, sound, and CCTV footage during activities, internships, visits, or online meetings. This footage may be used or published as part of the Science Office's activities, including photos and videos taken or recorded during events related to research projects, internships, visits, or meetings.

Purpose of Collecting, Using, or Disclosing Personal Data

In general, the Science Office uses personal data for managing user databases in terms of finance, reporting, and statistical analysis according to the table below, including the legal basis used by the Science Office for processing personal data.

Purpose Type of Personal Data Legal Basis
1) To create user databases and manage the use of scientific tools. Personal data as specified under the section on types of personal data collected, used, or disclosed. Necessary for the legitimate interests of the Data Controller or of another person or legal entity other than the Data Controller.
2) For financial operations such as service charges, invoicing, quoting, receipt issuance, procurement, payment to external parties, and personnel welfare payments. Personal data as specified under the section on types of personal data collected, used, or disclosed. Compliance with contracts and necessary for the legitimate interests of the Data Controller or of another person or legal entity other than the Data Controller.
3) To verify payment details such as account number and account holder name. Personal data as specified under the section on types of personal data collected, used, or disclosed. Compliance with contracts and necessary for the legitimate interests of the Data Controller or of another person or legal entity other than the Data Controller.
4) To manage the publication of information related to Science Office services. Personal data as specified under the section on types of personal data collected, used, or disclosed. Compliance with contracts and necessary for the legitimate interests of the Data Controller or of another person or legal entity other than the Data Controller.

Data Retention Period

The Science Office retains personal data of users to improve quality and work processes as detailed below:

Personal data retained for necessary periods include 1) User information such as title, first and last name (in Thai and English), student ID, position, supervisor information, education level, phone number, email, department name, faculty name, organization name, organization address, or related information 2) Research work information such as research project names, research topic names, or related information 3) Public relations information of the Science Office.

Rights of Personal Data Owners

The exercise of personal data owners' rights under the Personal Data Protection Act includes the following:

1) The right to access and request a copy of personal data related to oneself under the protection of the Science Office or to request the disclosure of the source of personal data not obtained with consent (Right of Access).

2) The right to obtain personal data related to oneself from the Science Office in a format that can be read or generally used by automated devices and to request the Science Office to send or transfer such personal data to another entity when possible by automated means (Right to Data Portability).

3) The right to object to the collection, use, or disclosure of personal data related to oneself (Right to Object).

4) The right to request the Science Office to delete or destroy personal data or make it anonymous (Right to Erasure).

5) The right to request the Science Office to restrict the use of personal data (Right to Restriction of Processing).

6) The right to request the Science Office to ensure personal data is accurate, up-to-date, complete, and not misleading (Right to Rectification).

Additional Information on Privacy Notice and Contact

If users have any questions or concerns about their privacy or the Privacy Notice, they can provide suggestions or file complaints about personal data at Click. For further assistance, users can contact the Science Office's Data Protection Officer via E-mail: thammasatsat@gmail.com

PDPA Image