Privacy notice for customers (Privacy Notice – Customers)

Cibes Lift (Thailand) Company Limited (hereinafter referred to as“company”) is aware of the importance and duties under Personal Data Protection Act 2019, with emphasis on respecting customers’ privacy rights. Including natural persons acting on behalf of the juristic person who is the owner of personal data. (hereinafter referred to as“customer”) and are very committed to protecting your personal information to be safe. and to ensure that customers’ personal information will be protected as required by the Personal Data Protection Act and other related laws. The Company has therefore prepared this privacy notice. To notify you of details related to collection, use, disclosure (collectively referred to as“Processing”) including legal rights as the owner of personal data The details are as follows.clause1. Who does this Privacy Notice apply to?This privacy notice covers customer personal information. Including natural persons acting on behalf of the juristic person who is the owner of personal data, such as directors, consultants, executives, employees, agents and any person related to the company’s personnel.“customer”Refers to persons who are the target of the Company’s product or service sales operations and includes participants in the Company’s campaigns or marketing activities. People interested in the company’s products or services through various channels and/or users of various services of the company through online media and various electronic media, as the case may be, including those with authority to act on behalf of customers according to the law, as the case may be, such as those exercising parental authority over minors Guardian of the incapacitated Protector of the quasi-incompetent, etc.clause2. Personal informationmeans information about an individual which enables him or her to be identified That person can whether directly or indirectly But it does not include specific information of the deceased such as first name, last name, address, telephone number. National identification number Social security card number               Tax identification number, email address (email-address), IP Address, Cookie ID, Log File, etc. However, the following information is not personal information, such as business contact information that does not identify an individual, such as company name, company address. Company registration number Work telephone number, email address used for work, company group email address such as info@company.co.th, Anonymous Data, or hidden data that has been made unable to identify an individual again by technical means. (Pseudonymous Data) information on deceased persons, etc.

Further in this privacy notice. If there is no specific mention, it will be called“Personal information”and“Sensitive personal information”related to users of the above services shall be collectively referred to as“Personal information”In the case that the company receives a copy of your ID card or the company removes your information from your national identification card by electronic means For the purpose of verifying identity in establishing legal relations. and/or any transactions With the company, the information received will include religious information as well. This is considered sensitive personal data (Sensitive Data). The Company has no policy to collect sensitive personal data from you. Except in the case where the company has received your consent. The company will determine management methods according to guidelines and as permitted by law.clause3. Personal information that the company collectsThe company stores your personal information only as necessary. According to the purpose of using the information that the company Will be informed in the next order. The types of personal data that the company stores are classified as follows:

Types of personal information	details
Basic personal information	Such as title, first name, last name, gender, date of birth, age, national identification number. Current address Address according to house registration, email, telephone number
Other information	(a) Contact Data such as address, telephone number, email, LINE account name (LINE ID), Facebook account name (Facebook ID) and user accounts on other social media websites, information on who can be contacted in an emergency. (b) Financial Data such as bank account numbers (c) Company contact information (Communication Data) such as data recording images or sounds when contacting the company. (d) Information on participation in various activities, such as recording still images or videos.

clause4. Source of personal informationThe company collects personal information. and your sensitive information Through the process as follows:4.1 Information you give directly to the companyFor example, information that appears in the service application. Including various supporting documents Request to change personal information or change other information Requests for service or other information requests about the company’s products or services Complaint information about products and/or services Information used to register and create an account or profile with the company in order to use the company’s services both offline and online channels. Information about your contact with the Company, whether in written or electronic form. as well as information that you provide to the company through surveys Giving suggestions or opinions through various channels Including information that you use to use the service at the head office or branch office. Customer service center or product or service exhibition booth, etc.4.2 Information that the company automatically collectsWhen you access the service through the company’s system or visit the company’s website through electronic devices such as mobile phones, computers, laptops, etc., using technology called “cookies” or other technologies that have the same or similar behavior.4.3 Data from external sources or reliable public informationsuch as the Department of Provincial Administration, Department of Business Development Commercial Resources Websites Applications Social Media Resources Data Providers, agencies or companies or associations or federations related to your products or services, etc.4.4 Information about your contact with the companyEmployees, employees, agents, partners or partners of the company Attorney or representative or other persons or other agencies related to or assigned by the Company through websites, applications, social media, telephone, email, meetings, interviews, short messages (SMS), fax, post, VDO, Call Service or by any other means. The Company may collect information in the form of messages. as well as images and sound4.5 Information about your participation in activities with the companyIn terms of marketing activities, contests, lucky draws, events or competitions Organized by or on behalf of the company and/or business partners or partners who participate in activities with the company or the company assigns or permits such activities. When you agree and consent to provide any personal information. related to outsiders to the company which such third party Including but not limited to those related to customers and service users. Whether in business or in any other way, such as family members, etc., you certify and guarantee the accuracy of that personal information. and you represent and warrant that you have fully informed them of this Privacy Notice.clause5. Purpose for collecting, using, and disclosing personal informationThe company collects, uses, or discloses your personal information. The objectives under which data processing is based are as follows:5.1Performance of the contract (Contractual Basis)For the performance of contracts to which you are a party, such as employment contracts, sales contracts, service contracts or any other contract or for use in processing your request/application before entering into a contract, as the case may be5.2Compliance with the law (Legal Obligation)To perform duties as required by law, such as labor protection laws. Social Security Law Tax law electronic transactions law Civil and commercial law, etc.5.3Legitimate benefits (Legitimate interest)For the legitimate interests of the Company without exceeding the extent that you can reasonably expect. which will not violate your fundamental rights or rights to freedom5.4Consent (Consent) The company will ask for your consent. In cases where the law requires consent to be requested or the company has no reason to use the above processing base to process personal data collected from you.

Purpose for collecting, using, and disclosing customer personal information The company collects, uses, or discloses your personal information. With the following objectives:

Purpose of operation	details	Data processing base
To carry out your request before entering into a contract or to perform according to a contract.	To sell products and/or services to you or comply with any contract which you are a contracting party Membership application information, delivery, accounting and financial operations After-sale service and product returns and take any action To enable you to receive products and/or services or as you have requested.	Performance of the contract
For the management of advertising and public relations	Advertisements , Do marketing campaigns, analyze, develop products, contact customers to give advice or present products. Including management of advertising media public relations which you are the presenter or appear as any part of the company’s advertising and public relations media.	• Consent • Legitimate benefits
For operational management (Operation) and after-sales customer care	Check and analyze personal information To develop the company’s online service channels In order for you to receive services from the company with quality The fastest and most convenient To be able to access or transfer Account information, member number or various personal codes that the company has provided services to you through more than one computer and/or other electronic devices and so that the company can supervise and monitor account access, member numbers, or various personal codes. of you efficiently To prevent unauthorized use or access by other persons or fraudulent use or in an illegal way Including to improve the company’s services to be more appropriate and efficient.	• Legitimate benefits • Consent • Contract base • Legitimate benefits • Contract base • Contract performance • Legitimate benefits • Contract base
Information technology management	Create an information system to collect data. Process data Connect information with customers and agents Create and provide information technology systems to process customer information from the use of the company’s websites, applications, and various social media such as Facebook, Line, etc.	• Legal compliance • Legitimate benefits • Consent • Contract performance • Legitimate benefits • Consent
to be able to manage Develop and take any action To be able to conduct business more efficiently	Product and/or service management (including websites and applications), fraud detection and prevention or other crimes Managing customer and prospect relationships Maintenance and use of IT systems Measuring the effectiveness of a company’s marketing policy and to measure the effectiveness of the company’s advertising through various channels.	• Legal compliance • Legitimate benefits • Consent • Legitimate benefits • Consent
Work management Complaints, disputes and lawsuits and risk management	Inspection, investigation of dishonest behavior, fraud, or actions that violate the law or public order. Taking any action to inspect, investigate, investigate, prosecute, or take any measures. To exercise contractual and legal rights Resolution of disputes or disputes that may occur between the Company and you related to the Company’s services.	• Legal compliance • Legitimate benefits • Legal compliance • Legitimate benefits

clause6. Disclosure of your personal informationTo carry out the purposes specified in this privacy notice. Your personal information It may be disclosed or sent to various agencies. Within the company and outside persons or agencies as follows:6.1 Within the companyYour personal information It may be disclosed or sent to specific departments within the company that are relevant and have roles and responsibilities only as necessary for the purpose. by these individuals or teams of the company will be allowed to access your personal information As necessary and appropriate6.2Outside the companyYour personal information It may be disclosed or sent to outside organizations as follows:6.2.1Government agencies Regulatory agencies or other agencies as specified by law.such as the Revenue Department    Department of Business Development Ministry of Commerce Auditors, the government, the courts, the Legal Execution Department, or any other agency that relies on legal authority6.2.2outside organization or personThe company may disclose your information. to outside organizations or individuals that have Contact us for the purpose of verifying your various transactions and in order to provide services or provide           Products in line with your needsclause7. Requesting consent and possible consequences of withdrawing consent

7.1 In the case where the company collects, uses, or discloses personal information based on your consent.You have the right to withdraw your consent given to the Company at any time. This withdrawal of consent will not affect the collection, use, or disclosure of personal information for which you have already given consent.7.2If you are a minor according to the Civil and Commercial CodeBefore giving consent, please inform the company of the details of the person using parental authority. So that the company can proceed with requesting consent from people with parental authority.

You may revoke your consent for the collection, use, or disclosure of all or some of your personal data. As specified in this privacy notice. By notifying the company

If you revoke your consent to allow the company to collect, use, or disclose your personal data for reasons or purposes other than marketing operations. The Company may not be able to carry out various procedures or provide services and/or manage products or products or your relationship and/or account with the Company. This may result in you losing the benefit of using the company’s services to the same level as if you gave consent to collect, use, or disclose personal information to the company.clause8. Sending or transferring personal information abroad

8.1 The Company may send or transfer your personal information to other persons both domestically and abroad.In cases where it is necessary to perform the contract to which you are a party. or is a contract between the company and another person or juristic person for your benefit. or for use in carrying out your request before entering into a contract or to prevent or stop danger to the life, body, or health of you or another person. To comply with the law or if it is necessary to carry out a mission in the important public interest.8.2 The Company may store your information on computers, servers (Server) or cloud (Cloud)provided by another person And may use other people’s programs or applications in the form of ready-made software services and ready-made platform services to process your personal information. However, the Company will not allow unrelated persons to have access to personal information. and the Company will require those other persons to have appropriate measures to protect the security of their personal information.8.3 In the event that it is necessary to send or transfer your personal information abroad.The Company will comply with personal data protection laws and take appropriate measures to ensure that your personal data will be protected and that you can exercise your rights regarding your personal data as required by law. Including the company will require those who receive your personal information to have appropriate measures to protect your information. and process such personal data only as necessary and take steps to prevent others from using or disclosing personal information without authority illegally.clause9. Retention and retention period of your personal information

9.1The Company will store your personal information for as long as necessary.Taking into account the necessity and purpose that the company must collect. Use and process This includes complying with the requirements of applicable law.9.2 The Company will continue to collect, use and disclose your personal information.Even if you end your relationship with the company. To the extent necessary in accordance with legal requirements for legitimate interests. or store it in a form that makes it impossible to identify individuals, whether directly or indirectly, such as “making anonymous data” (Anonymous Data) or “making hidden data that can no longer be identified by technical means” (Pseudonymous Data)              9.3 The Company may keep your personal data for as long as it is necessary to achieve the purposes of data processing.Your personal information as specified in this privacy notice. The company will keep your personal information.not more than10 yearFrom the date you ended the relationship or last contact with the company The Company may keep your personal information longer than required if permitted by law.9.4 The company will carry out an investigation in order to delete or destroy personal information.This makes it impossible to permanently identify the name of the owner of personal data. or otherwise restrict all personal data after the retention period has expired. or unrelated or beyond what is necessary for the purpose of collecting that personal information. or when the company has to comply with your request for the company to delete your personal information. 

clause10. How does the company protect your personal information?The Company places great importance on the security of your personal information, such as encryption, limiting access rights to personal information. To ensure that the company’s personnel and third parties acting on behalf of the company have complied with appropriate personal data protection standards. This includes the duty to prevent data leaks and the Company to use appropriate security measures for data processing.

The Company will keep your personal information well protected in accordance with technical measures and administrative measures. (Organizational Measure) to maintain appropriate security in the processing of personal data. and to prevent violations of personal information The company has established policies, regulations, and criteria for protecting personal information. Including measures to prevent recipients of information from being used by the company. or disclose information outside of the intended purpose or without authority or illegally and the company has improved the policy Such regulations and criteria periodically as necessary and appropriate. In addition, executives, employees, contractors, agents, consultants and recipients of information from the company have a duty to maintain the confidentiality of personal information according to the confidentiality measures set by the company.

The company has reviewed Improve the company’s personal information security procedures and measures to keep them up-to-date regularly. To obtain a level of personal data security appropriate to the risk. and ensure the confidentiality of personal information, completeness, availability, and flexibility in processing personal information on an ongoing basis. including protection Loss and collection, access, use, alteration, modification, or unauthorized disclosure of personal information. The Company will take various measures. in maintaining the security of the Company’s personal information applies to the processing of all types of personal information whether the processing of personal data is electronic; or document formatclause11. Rights of the data ownerYou have the right to do the following:(1) Right to withdraw consentIf you have given your consent for the company to collect, use and/or disclose your personal information. (Whether it is the consent you gave before the effective date of the Personal Data Protection Law or after) you have the right to withdraw your consent at any time throughout the period that your personal data is with the Company. Unless there is a restriction on that right by law or there is a contract that benefits you.

‍

However, withdrawing your consent may affect you from using the product. and/or services such as you will not receive benefits New promotions or offers Not receiving products or services that are better and consistent with your needs or not receiving information that is beneficial to you, etc. for your benefit Therefore, you should study and inquire about the effects before revoking your consent.

‍(2) Right to access personal informationYou have the right to access your personal information. and request the company to make a copy of such personal information for you Including requesting the company to disclose the acquisition of personal information in the company’s possession. The company may deny your request if access and requesting a copy of personal data will affect your rights and the freedom of others or the company must comply with the law or a court order prohibiting disclosure of that personal information(3) Right to have personal data transferredYou have the right to request your personal data in cases where the company has prepared that personal data in a format that can be read or used by an automatic tool or device. and can use or disclose personal information by automatic means Including the right to request the company to send or transfer personal data in such form to another data controller when this can be done by automatic means. and have the right to request personal data that the company sends or transfers personal data in such form directly to other personal data controllers unless unable to proceed due to technical reasons.

However, your personal information above must be personal information that you have given consent to the Company to collect, use and/or disclose. Or it is personal information that the company needs to collect, use, and/or disclose in order for you to be able to use the company’s products and/or services as intended for which you are a contract with the company. or for use in fulfilling your request before using the Company’s products and/or services. or is other personal information as required by legal authorities.(4) Right to object to data processingYou have the right to object to the collection, use and/or disclosure of your personal information at any time. If the collection, use and/or disclosure of your personal information is done for necessary operations under the Company’s legitimate interests. or of another person or legal entity. within the limits that you can reasonably expect. or to carry out missions for the public benefit If you submit an objection The Company will continue to collect, use and/or disclose your personal information only where the Company can legally demonstrate that it is more important than your basic rights. or for the purpose of confirming legal rights Compliance with the law or fighting legal suits according to each case

‍

You also have the right to object to the collection, use and/or disclosure of your personal data for marketing purposes. or for purposes related to scientific research history or statistics as well(5) Right to request deletion of personal informationYou have the right to request deletion or destruction of your personal information. or make your personal information non-identifiable If you believe that your personal information has been collected, used and/or disclosed in violation of applicable laws. or the Company considers that it is no longer necessary to retain it for the purposes related to this privacy notice. or when you have exercised the right to withdraw consent or exercised the right to object as stated above. Except in cases where the company must comply with the law. or exercise legal claims related to the preservation of such information.

‍(6) Right to request suspension of use of personal informationYou have the right to request a temporary suspension of the use of your personal information in cases where the company is in the process of investigating your request to exercise your right to correct personal information or your objection. or any other cases where the company is no longer necessary and must delete or destroy your personal information in accordance with relevant laws, but you request the company to stop using it instead.(7) Right to correct personal informationYou have the right to request the company to correct your personal information to be accurate, current, complete, and not cause misunderstandings.(8) Right to complainYou have the right to complain to the relevant legal authority. If you believe that the collection, use, and/or disclosure of your personal information is done in a manner that violates or does not comply with relevant laws.

If you have concerns or questions about the company’s practices. About your personal information Please contact the company. By using the contact details in section 15. of this privacy notice. In the event that there is reason to believe that the company Has violated personal data protection laws. You have the right to submit a complaint to the expert committee appointed by the Personal Data Protection Committee in accordance with the rules and procedures specified by the Personal Data Protection Law.

In the event that the owner of personal data submits a request to exercise rights under the Personal Data Protection Act. When the company receives such request Processing will be carried out within the time period specified by law. In addition, the company reserves the right to refuse or not process such requests in cases specified by law.

The Company has all rights and sole discretion to accept or reject your request.

Your exercise of your rights may be limited under applicable law. And there are some cases where it is necessary that the Company may refuse or be unable to proceed with your request to exercise your rights above, such as having to comply with the law or court order. for public benefit Exercising your rights may violate the rights or freedoms of others, etc. If the company refuses the above request. The company will inform you of the reason for the refusal.clause12. Links to Third Party WebsitesIn using the company’s website services It may contain links to social networks, platforms, and other websites operated by third parties. The Company endeavors to link only to websites that meet privacy standards. However, the Company cannot be responsible for the content or privacy standards of other websites. unless otherwise specified Any personal information you provide to third party websites will be collected by them and subject to Announcements/policies regarding the protection of personal data of such third parties (if any) in such cases. The company asks you to study and follow the announcements/policies regarding personal data protection that appear on that website, which are separate from the company’s.clause13. Changes to the Privacy Notice for CustomersThe Company will regularly review this privacy notice for customers to ensure compliance with guidelines and relevant laws and regulations. If there are changes to the privacy notice for customers The Company will notify you of any important changes to this Privacy Notice along with the updated Privacy Notice. Through appropriate channels. The company recommends that you check for changes to this privacy notice. This edition is periodic.clause14. Contact channelsIf you consider that the processing of your personal data does not comply with the Personal Data Protection Act 2019, you have the right to complain to the Personal Data Protection Officer.

Personal Data Protection Officer (Data Protection Officer)	Main name: Cibes Lift (Thailand) Company Limited. ‍E-mail address: info@cibeslift.com ‍Tel. 02-114-6500
Contact location	Company: Cibes Lift (Thailand) Co., Ltd. (Head Office) ‍Tax ID number 0105559027366 ‍891/49-52 Rama 3 Road, Bang Phong Phang Subdistrict, Yannawa District, Bangkok 10120

clause15. Applicable lawYou acknowledge and agree to this privacy notice. It is governed and interpreted according to Thai law and the Thai courts are the competent authority to determine any disputes that may arise.Announced on date31 May2565