Data Protection Policy for KX Build

Last updated: 11 Oct 2023 

1. Introduction

KX Build ("we", "our", or "us") is committed to ensuring the protection of personal data. This Data Protection Policy sets out the framework through which we manage, protect, and process personal data.

2. Scope

This policy applies to all employees, contractors, and third parties who have access to data either directly or indirectly.

3. Data Protection Principles

We adhere to the following principles:

  • Lawfulness, fairness, and transparency: Data will be processed lawfully, fairly, and in a transparent manner.
  • Purpose limitation: Data will only be collected for specified, explicit, and legitimate purposes.
  • Data minimization: Only necessary data for the purpose will be processed.
  • Accuracy: Data will be accurate and kept up to date.
  • Storage limitation: Data will not be stored for longer than necessary.
  • Integrity and confidentiality: Data will be processed in a manner that ensures its security.

4. Data Subjects' Rights

Data subjects have the following rights:

  • Right to be informed about the collection and use of their data.
  • Right of access to their personal data.
  • Right to rectification if the data is inaccurate or incomplete.
  • Right to erasure or to be forgotten.
  • Right to restrict processing under certain circumstances.
  • Right to data portability, allowing subjects to obtain and reuse their data.
  • Right to object to processing under certain conditions.

5. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

6. Data Breaches

In the event of a data breach, we will follow all required notification procedures as set by law, informing affected parties and relevant authorities within the stipulated timeframe.

7. Data Retention

We will not retain personal data for longer than necessary. The length of time data is kept will depend on the reasons for which we are processing the data and on the law or regulations that the data falls under.

8. Third-Party Data Processors

We ensure that any third parties we use to process personal data are compliant with data protection law and have appropriate protections in place.

9. Training

All employees and contractors are required to undergo data protection training to ensure understanding and compliance.

10. Changes to the Policy

This policy may be updated from time to time. All relevant stakeholders will be informed of any significant changes.

11. Contact

Any queries regarding this policy, data protection practices, or data subject rights should be directed to our Data Protection Officer at kx-build@kmutt.ac.th.