Updated May 2022
KASIKORNBANK PUBLIC COMPANY LIMITED (“KBank”) operates its business in adherence
with ethical standards and respect for your privacy. KBank has always placed importance on
personal data protection and security to ensure that your personal data obtained by KBank will
be used in accordance with the objectives and in compliance with law. KBank has formulated this
personal data protection policy (this “Policy”) to inform you, as a data
subject, of the objectives and details for collection, use and / or disclosure of personal data,
including your legal rights.
1. To whom will this Policy apply, and what are channels for personal data
collection?
1.1 To whom will this Policy apply?
This Policy shall apply to you if you are classified as
one or several types of the following persons.
| Type of person under the Policy | Details and examples |
|---|
1. Individual customer of KBank
(“Individual
Customer”) | KBank’s individual customer such as
- person who is using or has used products and / or services
- person who requests data on products and / or services
- person who has knowledge of data on products
and / or services
via various channels - person who has been offered or persuaded by KBank
to use or
accept products and / or services
|
2. Individual having involvement with
a juristic person which is a
customer of,
or conducts transactions with,
KBank
(“Personnel of Juristic Person”) | Individual having involvement with a juristic person which
is a customer of,
or conducts transactions with, KBank such as
- shareholder
- director
- authorized person
- agent or partner
- employee, officer and / or assignee
|
3. Individual having involvement with transactions
of KBank or KBank’s
customers | Individual having involvement with transactions of KBank
or KBank’s customers such as
- contact person
- employee, staff, officer, personnel
- person in the family, friend, neighbor
- person recommended or referred by KBank’s customers
- investor, guarantor, mortgager, security provider, ultimate
beneficial owner
- trade partner such as ,supplier, sponsor, dealer, seller,
contractor,
service provider, buyer, etc. - creditor, debtor, lessee, lessor
- person who makes payment to or receives money from KBank’s customers
- any other person of whom KBank may receive personal data from
transaction conducted by customers (such as property assessment
or loan provision) - person who visits KBank’s website or application, or online social
media
account or uses services at KBank’s branch or head office
- professional advisor
- any other individuals of similar nature
|
| 4. General individual | General individual such as
- person with whom KBank has a relationship, interaction,
contact
in other ways, or who has provided personal data to KBank,
or of
whom KBank has received personal data, either directly or
indirectly,
regardless of any channel
|
คลิกและเลื่อนเพื่อดูข้อมูล
1.2 Channel for collection of personal data
KBank may collect your personal data via the following
channels:
(1) The personal data that you give directly to or through KBank, or held by KBank
by your use of products and / or services, contact, visit, joining activities, search via
service channels and / or KBank’s contact channels such as branch, head office, website,
application, online social media account of KBank, email, ATM, K-CDM (Cash Deposit Machine) or
other financial service machines, banking agent, K CHECK ID, cheque direct service, customer
data service center, international trade service center, telephone, facsimile, postal mail,
short message service (SMS), questionnaire, name card, meeting, training, seminar, event,
recreation, marketing promotion activity, contact or any other channel;
(2) The personal data received or accessed by KBank from other sources, such as
government agencies, other companies within KBank Financial Conglomerate, other banks or
financial institutions, financial service providers and other service providers of KBank,
business partners and service providers of business partners, companies that jointly issue
products and / or services with KBank, the National Credit Bureau, information service
providers, KBank’s customers, individuals or juristic persons conducting a transaction with
KBank (as you having involvement with such transactions as mentioned above), registrar,
securities issuer, Thailand Securities Depository Co., Ltd. (TSD), online social media, online
platform of third party, public data sources (such as Government Gazette), a person having legal
authority or legal right, any other person or agency with which KBank has a legal relationship,
etc.
2. Which personal data does KBank collect, use, and / or
disclose?
2.1 Personal data is the data that
can directly or indirectly identify you, i.e.
2.1.1 Individual means
Individual Customer, individual having involvement with transactions of KBank or KBank’s
customers and general individual.
| Type of data | Examples of data that KBank collects, uses and / or
discloses |
|---|
| Personal information | - Title, first name, middle name, last name, alias (if any)
- Gender, date of birth, age
- Marital status, family status, number of family members and children
- Data of relationships (such as between the principal and joint
borrower,
principal and supplementary cardholder, you and
beneficiary) - Nationality, country of residence
- Signature
- Data on the document issued by government agencies (such as copy of
national ID card, copy of passport, copy of visa, copy of
certificate of alien,
copy of work permit, copy of government /
state enterprise official,
copy of house registration, copy of
birth certificate, copy of name change,
copy of marriage
certificate, copy of divorce certificate, copy of death certificate,
copy of driving license or documents used for identifying and
confirming identity
of the same characteristic), other KYC and
CDD data, etc.
|
| Contact information | - Address per important document, home address and address in the
country
of your nationality, workplace - Telephone number, mobile phone number, facsimile, email
- Name or user name for contact via electronic communication or online
social media
(such as LINE ID) - Evidence for having residence in Thailand (for foreign national)
|
| Education and work information | - Data on a copy of student ID card, the highest education level
- Career and professional field
- Position, current years of work
- Work detail, type of business
|
| Proprietorship data | - Shareholding ratio and / or data on other documents for confirming
business operation
(such as commercial lease agreement)
|
| Financial data and transaction | - Deposit account number, deposit amount, interest
- Credit / debit card number
- Income data, source of income and expenses
- Information on salary certificate, salary slip / bonus or evidence
showing other income,
other banks’ account statement, appraised
value of property - Tax ID number and data on personal tax payment
- Data on application for channel, product and / or service
- Type of account, deposit period, conditions for payment, type of
card,
account statement - Credit score, credit card limit, accumulated points, approved credit
limit,
borrowing data, debt amount, collateral data and
documents showing ownership
of collateral details and payment
history - Investment data (such as details of securities subscription or
reservation), invest
risk level, data per risk profile
assessment form, client suitability data,
trading securities
data, value of securities, investment value, investment period) - Transaction history, transaction details and objectives for
transaction, data
in transaction memo, transaction reference
number, transaction channel - Application user name and password
- Insurance data (such as documents related to insurance application,
type of insurance,
insurance application, details of insurance
policy, starting and ending date of coverage,
details of insured
property, insurance premium, the sum insured and details
on
insurance claims) - Other information to support the use of products / services (such as
customer code /
customer information system (CIS), cheque data,
bill of exchange data, credit line,
interest rate, related
currency, information to support loan application, trade data,
purchase order, purchase and sale agreement and / or other
agreements, details on
guarantee, Form for Declaration of Status
as U.S. Person or Non-U.S. Person (FATCA)
|
| Technical data, devices or equipment | - Data of application usage
- IP address or MAC address
- Cookies ID
- Web beacon, Pixel Tag or Software Development Kit (SDK)
- Device ID
- Series and type of devices, network, connection data
- Data on access, data on single sign-on (SSO)
- Log
- Data on login, access period, usage and usage period of application
and website,
search history, browsing data - Time zone and location data
- Type and version of plug-in browser, operating system and platform
including other
technologies on your device used for accessing
platform - Other technical data from usage on platform and operating system
|
| Other information | - Record of communication or correspondence between you and KBank,
details on
complaints or comments, request for exercising
rights, survey results, audio record,
photos, video, audio
clips, communication record via log / chat bot, photos or video
from CCTV, data on court order / Government Gazette related to
transactions of
KBank’s customers or related to KBank’s
compliance with laws (such as receivership
order, order for
appointment of administrator of an estate, order effecting a person
to be incompetent or quasi-competent person, order for
submission of documentary
evidence or physical evidence) and any
other data deemed personal data under the
personal data
protection law. - Data on registration for joining KBank’s activities
|
คลิกและเลื่อนเพื่อดูข้อมูล
2.1.2 Personnel of Juristic Person means individual having involvement with a
juristic person which is a customer of, or conducts transactions with, KBank.
| Type of data | Examples of data that KBank collects, uses and / or
discloses |
|---|
| Personal information | - Title, first name, middle name, last name, alias (if any)
- Gender, date / month / year of birth, age
- Marital status, signature,
- Data on documents issued by government agencies (such as copy of
national ID card, copy of passport, copy of visa, copy of alien
certificate,
copy of work permit, copy of house registration or
documents used for
verifying and confirming identity of the same
characteristics), other KYC
and CDD data, etc.
|
| Contact information | - Address per important document, current home address and address in
the country of nationality, workplace - Telephone number, mobile phone number, facsimile number, email
|
| Work information | - Career and professional field
- Position, current years of work
- Work detail, type of business
|
| Information in documents supporting transaction | - Company certificate
- List of shareholders
- Power of Attorney
- Commercial registration certificate
|
| Other information | - Information which has been collected, used and / or disclosed
relating
to relationship with KBank such as information given by
a juristic person
to KBank in a contract, details about
complaints or comments,
survey results., information on
registration for joining KBank’s activities
|
คลิกและเลื่อนเพื่อดูข้อมูล
2.2 Sensitive Personal Data
“Sensitive Personal Data” means personal data which is
specifically determined by law. KBank has no intention to collect Sensitive Personal Data from
you.
In certain cases, however, KBank may need to collect Sensitive Personal Data
from you for providing services or products to you, for example, religion (displayed on a copy
of national ID card) or race (displayed on a copy of passport of some countries), biometric data
(such as facial recognition data, fingerprint recognition data, electronic signature data which
uses technology extracting specific behavior of such signing for identification and
authentication of the person who writes such signature), data on criminal record, health data,
data on disability, sexual behavior, etc. KBank shall collect, use and / or disclose the
Sensitive Personal Data provided that KBank has been given explicit consent by you or permitted
by law. This shall be undertaken on a case-by-case basis when KBank is required to collect
Sensitive Personal Data from you.
(Unless specifically stated otherwise, personal data and Sensitive Personal
Data as earlier mentioned shall hereinafter be collectively referred to as “Personal
Data”.)
2.3 Personal Data of minors, incompetent or quasi-incompetent
persons
KBank has no intention to collect, use and / or disclose Personal Data of
minors, the incompetent or quasi-incompetent persons, unless KBank obtains consent from the
guardian, the appointed guardian, the appointed curator or any act which minors may give consent
by itself pursuant to law (as the case may be) and / or has any lawful basis. If KBank discovers
that the collection, use and / or disclosure of Personal Data of minors, the incompetent or
quasi-incompetent persons is undertaken without (i) consent from the guardian, the appointed
guardian, or the appointed curator or minors who may give consent by itself pursuant to law (as
the case may be) and (ii) any lawful basis, KBank shall delete or destroy such Personal Data.
2.4 Personal Data of any other third party
If you provide Personal Data of any other third party who is a Personnel of
Juristic Person and / or who has involvement with you to KBank such as shareholders, directors,
authorized persons, family members, reference persons, trade partners, guarantors, mortgagers,
providers of collateral, beneficiaries, administrator of an estate, emergency contact persons
and / or any other person per document of your transaction, etc., please inform those persons of
the details under this Policy and request their consent, if necessary, or apply other lawful
bases to ensure that KBank can collect, use and / or disclose Personal Data of the
aforementioned third party.
3. What are the objectives of collection, use and / or disclosure of your Personal
Data?
KBank will collect, use and / or disclose your Personal Data only as
necessary under KBank’s legitimate objectives which include the collection, use and / or
disclosure of Personal Data for compliance with the contract in which you are a contract party,
for performance of duties as required by law, for legitimate interest, for operations according
to your consent and / or for operations under other lawful bases. Objectives for collection, use
and / or disclosure of Personal Data under this Policy are as follows.
Some of the following
objectives may or may not apply to you. Please consider the objectives in accordance with your
relationship with KBank on a case-by-case basis.
3.1 Objectives requiring consent
KBank shall collect, use and / or disclose your Personal Data based on
consent for the following objectives.
3.1.1 Collection, use and / or disclosure of Sensitive Personal Data for
which KBank cannot apply other lawful bases but must request explicit consent. Such objectives
shall be:
(1) Data on religion and race (such data collected from a copy of national ID
card or passport of some countries which KBank needs to use as evidence of identification and
authentication only.)
(2) Biometric data for signing, identification and authentication, electronic
know your customer service of KBank and for support of KBank’s business partners
(3) Health record data, disability data, criminal record, and sexual behavior
which KBank shall collect, use and / or disclose only when necessary for the use of certain
products and / or services of KBank only. Criminal record shall be used for examination and
confiscation of related property
3.1.2 Analyses, research and / or conducting statistical data including those
for development, improvement of products and / or services of KBank, other companies within
KBank Financial Conglomerate, business partners and / or other juristic persons that require
your consent in accordance with law.
3.1.3 Marketing operations, submission of offers for products and / or
services, privileges for attending activities held by KBank, other companies within KBank
Financial Conglomerate, business partners and / or other juristic persons including news, useful
advice and appropriately selected promotions and launch of marketing strategies that require
your consent in accordance with law.
KBank may request your consent directly or via other companies within KBank
Financial Conglomerate, business partners and / or other juristic persons on a case-by-case
basis.
3.2 Objectives requiring other lawful bases other than
consent
KBank will collect, use and / or disclose your Personal Data based on other
lawful bases as necessary under KBank’s legitimate objectives, such as, for compliance with the
contract in which you are a contract party or your request, for performance of duties as
required by law , for the legitimate interest and / or for operations under other lawful bases
for the following objectives:
3.2.1 Operations before entering into a contract with KBank
as giving consultation, advice and / or any other data related to products
and / or services, analysis and assessment of customer demand, verification of qualification,
verification of juristic person customer’s status, check of data or document accuracy,
identification and authentication, including know-your-customer (KYC) and customer due diligence
(CDD) procedure, property assessment, credit data examination and / or request for credit data
correction, examination of Sanction List of competent authorities and / or government agencies
which are generally disclosed as required by law, examination of receivership or insolvency,
customer risk classification, and pre-filling of customer’s personal information / contact
information for facilitation in applying for products and / or services of KBank.
3.2.2 Any operation related to consideration of products and / or
service provision
such as communication, receipt / delivery of documents or parcels, processing
of request and operation per the request approval procedure (including but not limited to
customer’s property assessment, property examination and valuation, property price review),
establishment of card / loan limit, entering into a contract, agreement and / or any other
related juristic act, registration for use of products, services and / or for participation in
KBank’s activities.
3.2.3 Delivery of products and / or services under the contract you
have entered into with KBank such as
- Disbursement of loan, investment, purchase of insurance, deposit, withdrawal, transfer,
exchange
- Any operation related to the provision of products and / or services (such as opening of
account, change in data, establishment of, use of or change in credit line or account
update, payment of dividend and interest, return of principal, acceptance of payments,
amendment to deposit contract and interest rates as earlier agreed, account suspension, card
suspension, account balance check, conducting transaction report, operation related to
relationship between credit line and securities, operation related to securities, purchase
of property insurance, credit card point accumulation and redeeming accumulated points,
reconciliation, change or increase in card limit, check of accumulated points, card
activation, preparation of customer data documents used for customer’s transaction (such as
document certification))
- Examination, confirmation and improvement of transactions (including transaction conducted
via K-CDM, ATM, K CHECK ID, website and / or KBank’s application
- Provision of benefits and operation in accordance with customers’ benefits
- Customer relationship management, after-sale transaction operation, customer facilitation
and / or management of complimentary gifts for customers
- Provision of advice or risk management guidelines
- Complaint management, solving problem, operation per customer request
- Acceptance of payment or any asset
- Monitoring compliance with conditions for use of products and / or services, termination of
services.
3.2.4 Marketing operation which does not require your consent under
the law such as
- Consideration of customer groups for sending them invitation to join activities or sales
promotion as appropriate
- Submission of the offering of products and / or services, privileges for attending
activities, events or meeting held by KBank, including facilitation for joining activities
(such as registration for event)
- Offering of products, services and / or privileges that you have requested or notification
of your benefits
- Offering of products and / or services of the same type / close to those of KBank or other
companies within KBank Financial Conglomerate which you are using
- Contact in case where you have dropped off the application for products and / or services to
facilitate you in case you wish to reapply for the products and / or services of the same
type with KBank, or offering other products and / or services that you may have an interest
in
- Organization of sales promotional activities (such as provision of benefits and gifts).
3.2.5 Analysis, research and / or conducting statistical data which
does not require your consent under the law for development, improvement of products and /
or services within KBank such as
- Analysis, research, marketing research, conducting statistical data analysis of your
financial data and / or conducting report for KBank’s internal use
- Analysis, conducting model (such as credit scoring)
- Studying, analyzing and monitoring the proportion of credit portfolio.
3.2.6 Other operations of KBank such as
- Management, risk management, internal audit within KBank
- Maintain legitimate benefits
- Conducting customer database or recording data in the system or database
- Consideration and review of customer credit quality
- Notification of debt payment or renewal of products and / or services
- Debt collection
- Satisfaction survey and assessment after use of products and / or services
- Litigation or other legal processes
- Participation, coordination and / or assignment of work to another person to perform on
behalf of or in collaboration with KBank (such as for design of products or services, design
of customer service experience, design of process or support of the delivery of products and
/ or services)
- Assignment of rights and / or duties, management of operations of KBank and other companies
within KBank Financial Conglomerate
- Use of CCTV, control of entry / exit of KBank’s premises
- Management of complaints or management of illegal incidents or suspicious incidents (such as
fraud, money laundering, terrorism and mass destruction weapon proliferation, crime,
intellectual property infringement including management planning, examination, surveillance,
evidence collection, reporting, and / or detection)
- Prevention and assessment of risk, which may be incurred from granting financial
accommodations, of financial institution system
- Conducting database on business risk to KBank
- IT operation, communication system management and prevention, response and mitigation of IT
risk and cyber threats
3.2.7 Compliance with the order of competent authorities and / or
compliance with laws such as
- Compliance with the order of court, the government agencies, banking supervisory agencies,
competent officers under the personal data protection law, financial institution business
law, securities and stock exchange law, life insurance law, non-life insurance law,
insurance commission law, payment system law, exchange control law, deposit protection
agency law, taxation law, anti-money laundering law, counter-terrorism and proliferation of
weapons of mass destruction financing law, computer crime law, bankruptcy law and other laws
with which KBank is required to comply, either in Thailand or other countries, including
regulations and rules issued under these laws, which are now being enforced, to be amended
or to be enforced in the future.
3.2.8 Prevention or cessation of danger to a person’s life, body or
health
3.2.9 Conducting historical documents or annals for public benefit or
related to study, research or statistics
3.2.10 KBank’s operation of public benefit or performance of duties
in using the government’s authority granted to KBank
If KBank needs to collect, use and / or disclose your Personal Data for
execution of or compliance with a contract that you have entered into with KBank and / or for
KBank’s performance of duties under the law and you, upon request, do not provide such necessary
Personal Data to KBank or you have chosen to delete your user account from the application of
KBank, KBank may not be able to approve or deliver / provide products and / or services, either
partly or wholly, for you and it may impact on KBank’s performance of duties under the law or
your relationship with KBank.
4. To whom will your Personal Data be disclosed?
Under your consent or criteria permitted by law, KBank may disclose your
Personal Data to a third party. Persons or agencies receiving such Personal Data will collect,
use and / or disclose your Personal Data within the scope for which you have given consent, or
within the scope related to this Policy. In certain cases, you may be under the personal data
protection policy of such recipient of your Personal Data. The recipient of your Personal Data
may be in Thailand or other countries.
KBank may disclose your Personal Data to persons or agencies based on your
relationship and transaction as follows:
| Type of Personal Data | Details |
|---|
Other companies within KBank
Financial Conglomerate |
KBank may disclose your Personal Data to other companies within KBank
Financial
Conglomerate for the determined purposes or according to your
consent under this Policy.
Other companies within KBank Financial
Conglomerate can rely on the consent
that KBank obtains.
|
| KBank’s service providers |
KBank may use another company, trade partner, KBank’s agent, sub-contractor
or
external service provider to conduct business operation on behalf of
KBank or to support
the provision of KBank’s products and / or services
to you. Therefore, KBank may
disclose your Personal Data to KBank’s
service provider, including but not limited to:
- Banking agents
- National Digital ID Company Limited
- National Interbank Transaction Management and Exchange (NITMX)
- Service providers of digital infrastructure system and service
providers of database
system for data exchange between financial
institutions - Property valuation service providers
- Thailand Securities Depository Co., Ltd.
- Telecom operators
- IT, technology support and security service provider
- Cloud computing service providers
- Marketing service providers
- Document storage providers
- Online social media providers
- Payment channel service providers
- Debt collection service providers
- Printing house or print service providers
- Card producers
- Document or parcel delivery providers
- Provider of concierge services
|
| KBank’s business partners |
KBank may disclose your personal data to
- KBank’s business partners including those who jointly provide
products and / or
services (such as non-life insurance or life
insurance companies) - Business partners for point collection or tokenization
- Co-branding business partners
- Banks or other financial institutions (such as corresponding bank)
- Business partners which are fintech companies
- Co-underwriters
In cases where your Personal Data is disclosed to business partners for
their marketing
purposes such as for sales promotion, public relations
or offering of products and / or
services by business partners to you,
KBank will notify you of the names of business
partners for supporting
your decision in giving consent. Business partners can rely on
the
consent that KBank obtains.
|
| Persons determined by law |
In some cases, KBank may be required to disclose your personal data for
compliance
with the order of persons having legal authority or legal
rights and / or for compliance
with law. The recipients of your Personal
Data include:
- law enforcement agencies
- banking supervisory agencies (such as the Bank of Thailand, The
Office of Securities
and Exchange Commission, the Anti-Money
Laundering Office, the Office of Insurance
Commission (including
but not limited to the purpose of regulating and promoting of
insurance business according to Iinsurance Ccommission law and
life Iinsurance law.
You can see privacy notice of the Office of
Insurance Commission at
(https://www.oic.or.th), the Stock
Exchange of Thailand, Thailand Securities Depository
Company
Limited, The Revenue Department, the Department of Provincial
Administration, courts, police officers, the Legal Execution
Department,
the Department of Lands, the Department of Land
Transport, the Office of Personal
Data Protection Commission,
the Office of Consumer Protection Board, agencies
performing the
duty of registering collaterals, etc.) - public agencies
- associations, agencies or any other person as necessary to perform
duties under laws
or regulations or for protection of KBank’s
rights, third party’s rights, which may
include any related
legal procedures (such as the Thai Bond Market Association
|
| Advisors / experts |
For the benefit of KBank’s business operation, KBank may disclose your
Personal Data to
- auditors
- external auditors
- legal advisors
- tax advisors
- credit rating companies
- other advisors or experts, as the case may be
|
Prospective assignee and / or
assignee of rights in any transaction
or merger of KBank |
In cases where KBank engages in organizational restructuring, debt
restructuring, merger,
business acquisition, transfer of rights,
business dissolution or any other incidents of
the same nature, KBank
may need to disclose your Personal Data to:
- trade partners, interested parties
- asset management companies and / or those assignees of rights
|
| Any other third party |
KBank may disclose your Personal Data to any other third party for the
objectives as
specified in this Policy. Any other third party receiving
your Personal Data may include
but are not limited to
- the persons with whom you have entered into a contract or have
relationship relating
to transaction (such as reference person,
guarantor, mortgagor, provider of securities
and beneficiary or
embassies for document certification) - National Credit Bureau
- developers of technology infrastructure and / or work system of
KBank
- banks or other financial institutions where you have shared
transaction
- issuer of securities, securities registrar, fund manager, custodian
or other
asset management companies related to your transaction
- Society for Worldwide Interbank Financial Telecommunications (SWIFT)
Members of
National Digital ID Company Limited - card schemes (such as VISA, Mastercard, JCB, UPI)
- universities or educational institutions
- users of KBank’s e-KYC services
- online social media provider
- public or ordinary people
|
คลิกและเลื่อนเพื่อดูข้อมูล
5. Will KBank send or transfer your Personal Data to other countries?
KBank may need to send or transfer your Personal Data to other companies
within KBank Financial Conglomerate located in other countries, or to other recipients of data,
as part of KBank’s normal business operation. For instance, sending or transferring Personal
Data for storage on cloud platforms or servers located in other countries, sending or
transferring data of cross border fund transfer transaction to a financial institution located
in another country via international funds transfer management intermediaries, a trade partner
which is a private banker in another country, banks or financial institutions which are
corresponding banks or nostro banks in other countries, business partners including those
jointly providing products and / or services and co-branding business partners, online social
media service providers, government agencies in other countries and / or a person having
connection with your transaction in other countries, etc.
If the destination country has insufficient standards of Personal Data
protection, KBank shall ensure that Personal Data will be sent or transferred in accordance with
law and shall set standards of Personal Data protection as deemed necessary, and appropriate for
and consistent with the confidentiality standards. For instance, an agreement must be entered
into with the data recipient in that country to ensure that your Personal Data will be protected
under the Personal Data protection standards equivalent to that in Thailand. If the data
recipients are other companies within KBank Financial Conglomerate, KBank may decide to conduct
binding corporate rules verified and certified by relevant competent authorities and will send
or transfer Personal Data to other companies within KBank Financial Conglomerate located in
other countries in accordance with said binding corporate rules.
6. Use of cookies and / or technologies of similar nature
KBank may collect and use cookies and / or any other technologies of similar
nature when you use KBank’s website and / or application including conducting transactions,
using products and / or services of KBank via digital channels and internet network. The
collection of cookies and / or use of any other technologies of similar nature will help KBank
to recollect your use and preferences, including analysis of your interest for improvement and
development of efficiency of KBank’s website and / or application in order to respond to your
demand and use so that you can have positive experiences in using KBank’s website and / or
application. You can learn more details from the “Cookies Policy” of KBank at www.kasikornbank.com/th/privacy-policy/Pages/CookiesPolicy.aspx
Moreover, KBank may disclose the data that cannot identify you to data
analysis service providers such as Google, both in Thailand and other countries. Google will use
technologies and tools for data analysis such as cookies and / or the Software Development Kit
(SDK) to monitor and conduct reports of data analysis related to your use of KBank’s website and
/ or application. You can learn details of Google’s data analysis under the heading “How Google
uses data when you use your partner’s sites or apps” at www.google.com/policies/privacy/partners or other URL as determined by
Google.
7. How long does KBank keep your Personal Data?
KBank will keep your Personal Data during the period you are KBank’s customer
or have a relationship with KBank, or throughout the period required in order to achieve the
related objectives of this Policy. Once your relationship with KBank ends, KBank will further
keep your Personal Data for a period as necessary according to the statute of limitations or for
a period as required or permitted by law, for instance:
- Personal Data shall be kept in accordance with the anti-money laundering law for 5-10 years
after the end of the relationship, as the case may be.
- Personal Data shall be kept in accordance with financial institution business law,
securities and stock exchange law, accounting law, and taxation law, for 10 years after the
end of the relationship.
KBank will undertake operations through appropriate steps to delete or
destroy the Personal Data or make it anonymous when it is no longer necessary or said period
ends.
8. How does KBank protect your Personal Data?
KBank shall apply technical, administrative and physical safeguard measures
for safekeeping of your Personal Data in order to maintain confidentiality, accuracy,
completeness, and availability of Personal Data to prevent unauthorized or illegitimate access,
collection, revision, rectification, use and / or disclosure of Personal Data in accordance with
legal requirements.
KBank has put in place appropriate measures to prevent the infringement of
Personal Data. KBank has therefore established policies, procedures and criteria for Personal
Data protection such as measures to control access to Personal Data and use of secure and proper
devices for storing and processing Personal Data, restriction of access to Personal Data,
determination of users’right to access Personal Data, right to permit assigned employees to
access Personal Data and users’ responsibilities in order to prevent unauthorized access to
Personal Data, unauthorized disclosure, unauthorized knowledge or unauthorized copy of Personal
Data, or theft of devices used for storing or processing Personal Data. Measures have thus been
put in place for tracking back of access to, change in, deletion or transfer of Personal Data,
which are consistent with and appropriate for the methods and tools for collection, use or
disclosure of Personal Data, including examination for assessing the effectiveness of compliance
with policies, procedures and criteria for Personal Data protection.
KBank’s executives, employees, personnel, contractors, representatives,
advisors, and recipients of data from KBank shall maintain the confidentiality of Personal Data
in accordance with the confidentiality measures determined by KBank.
9. What are your rights in connection with your Personal Data?
Your rights under this item are legal rights that you should be aware of. You
can exercise your rights as stipulated by law and this Policies currently available or to be
amended in the future, including criteria determined by KBank. If you are less than 20 years
old, or have limited capacity to perform juristic acts under the law, you may request your
father and / or mother, appointed guardian or authorized person to express the intention to
exercise these rights on your behalf.
9.1 Right to withdraw consent (opt-out):
You are entitled to withdraw the consent that you have previously given to
KBank to collect, use and disclose your Personal Data (whether such consent has been given prior
to or after the personal data protection law is enforced), at any time during which your
Personal Data is held by KBank, unless there is right restriction by law or there is a contract
which is beneficial to you which remains valid. The collection, use and / or disclosure of your
Personal Data which was undertaken before the withdrawal of your consent shall not be affected.
However, the withdrawal of your consent related to and required for the
service request may prevent KBank from complying with the contract or providing services to you,
or may cause the transaction or any other related activities to be suspended or temporarily
discontinued, or may affect your knowledge of products and / or services, for instance, you may
not receive the offer of products and / or services, benefits, promotions or other new offers,
or may not receive alternative products or services which are more in line with your needs, or
may not receive news and recommendations that are beneficial to you, etc. For your own benefit,
you should determine and inquire about the potential impacts before deciding to withdraw your
consent.
9.2 Right to access:
You are entitled to have access to your Personal Data under KBank’s
responsibility and to request KBank to provide you duplication of your Personal Data and inform
you of how your Personal Data has been obtained.
9.3 Right to data portability:
You are entitled to request your Personal Data which has been processed by
KBank to be in a format that can be read or used in general with an automated device or
equipment, and can be used or disclosed via automated methods. You are also entitled to request
KBank to send or transfer your Personal Data of said format to other data controllers if it can
be processed via automated method, and to request Personal Data of said format which is directly
sent or transferred by KBank to other data controllers, unless it cannot be processed due to
technical difficulties.
Your aforementioned Personal Data must be Personal Data that you have granted
consent to KBank to collect, use and / or disclose or must be Personal Data that KBank needs to
collect, use and / or disclose for your use of KBank’s products and / or services in accordance
with your intention wherein you are a contract party with KBank or for undertaking operations
per your request before using KBank’s products and / or services or must be other Personal Data
as determined by competent authorities.
9.4 Right to object:
collection, use or disclosure of your Personal Data at any time. If the
collection, use or disclosure of your Personal Data, to which you lodge an objection, is
undertaken under legitimate interest of KBank or any person or any juristic person, or for
public benefit, KBank shall continue to collect, use and / or disclose your Personal Data only
if KBank can provide legal reasons that the collection, use and / or disclosure of your Personal
Data is sufficiently important, or is undertaken for the establishment, defense, use of, or
compliance with, the rights to claim in accordance with applicable law, as the case may be.
In addition, you are entitled to lodge an objection to the collection, use
and / or disclosure of your Personal Data which is undertaken for objectives related to direct
marketing or for the purpose of scientific, historical or statistical studies and research.
9.5 Right to deletion or destruction:
You are entitled to request KBank to delete or destroy your Personal Data or
make it anonymous if you believe that your Personal Data has been collected, used and / or
disclosed illegitimately, which is not in compliance with applicable laws or if you deem that it
is no longer necessary for KBank to keep your Personal Data under the objectives of this Policy
or when you exercise your right to withdraw consent or your right to object as mentioned
earlier.
9.6 Right to suspension:
You are entitled to request KBank to suspend the use of Personal Data if
KBank is conducting an investigation per your request to exercise your right to rectification or
right to object, or for any other case wherein it is no longer necessary for KBank to keep your
Personal Data and KBank must delete or destroy your Personal Data in accordance with applicable
laws, but you have sought to request KBank to suspend the use of your Personal Data instead.
9.7 Right to rectification:
You are entitled to rectify your Personal Data to keep it accurate,
up-to-date, complete and not misleading.
9.8 Right to lodge complaint:
You are entitled to lodge a complaint to relevant competent authorities if
you believe that the collection, use and disclosure of your Personal Data violates or does not
comply with applicable laws.
Exercising the aforementioned rights may be restricted by applicable laws,
and, in certain cases, there may be compelling reasons that may cause KBank to deny your request
or may prevent KBank from complying with your request such as for in compliance with laws or
court orders, for the public benefit, exercising the aforementioned rights may potentially
violate other persons’ rights or freedoms, etc. If KBank denies aforementioned request, KBank
shall give you the reason(s) for such denial.
You can submit your request to exercise your rights via the following
channels:
| Rights | Channels to exercise the rights | Operation period
(from the date you submit complete
application
and supporting documents) |
|---|
| K PLUS | K - Contact Center | Branches |
|---|
| Right to withdraw consent (opt-out) | | | - | 7 business days |
| Right to access | - | - | | 30 days |
| Right to data portability | - | - | |
| Right to object | - | | - |
| Right to deletion or destruction | - | | - |
| Right to suspension | - | | - |
| Right to rectification | - | - | | Immediately |
คลิกและเลื่อนเพื่อดูข้อมูล
Download form for exercising your rights here
10. Will KBank rectify or revise this Policy?
KBank may consider rectifying, revising or changing this Policy from time to
time, as deemed appropriate and permitted by law. In case of rectification or revision of, or
change in this Policy, KBank will announce the current policy on KBank’s website at xwww.kasikornbank.com/th/privacy-policy.
11. How can you contact KBank and the data protection officer?
If you have any suggestions or would like to inquire about information
regarding details of the collection, use and / or disclosure of your Personal Data including
exercising your rights under this Policy, you can contact KBank via K PLUS, KBank’s branches or
K-Contact Center at tel. 02-8888888.
In addition, you can contact the data protection officer by email at email
address: DataProtectionOfficer@kasikornbank.com.
Address: No. 1, Soi Rat Burana 27/1, Rat Burana Road, Rat Burana Sub-district, Rat Burana
District, Bangkok 10140