Privacy Policy

1. Definitions

“Personal Data” :	Any information relating to an individual which enables the identification of such individual, whether directly or indirectly, but not including the information of the deceased person in particular.
“data subject(s)” :	Any individual person who can be identified, directly or indirectly, via Personal Data, including the Company’s website visitors.

2. Types of Personal Data concerning website visitors collected by the Company

The Company collects the following Personal Data concerning its website visitors :
name-surname, address, telephone/mobile phone number, and email address of the website visitor when he/she contacts the Company through its website.
In addition, the Company collects certain Personal Data concerning website visitors by using cookies. For further information on the Company’s use of cookies, please see paragraph 8 below.

3. Sources of Personal Data

The Company may collect Personal Data concerning its website visitors from the following sources:

The website visitor provides his/her Personal Data to the Company directly :
The Company collects the Personal Data filled in by the website visitors in the ‘Contact Us’ section and the ‘Catalog Download’ section in the Company’s website, etc.
Personal Data concerning website visitors that the Company automatically collects from the relevant website visitor :
The Company may automatically collect certain technical information about the website visitors’ equipment, browsing actions and patterns by using cookies and other similar technologies. For further information on the Company’s use of cookies, please see paragraph 8 below.

4. Collection, use, and disclosure of Personal Data concerning website visitors, and the purposes and the legal basis thereof

The Company will duly collect, use and/or disclose Personal Data concerning website visitors on a limited basis pursuant to the purposes and the lawful basis set out below, and the procedures pursuant to the Data Protection Law.
The Company collects Personal Data concerning website visitors to use and/or disclose the same for the following purposes and any other related or associated purposes:
1. assisting the website visitors with their enquiries, requests and/or comments;
2. obtaining feedbacks and keeping the website visitors updated on the Company’s products and services;
3. conducting marketing activities including, among others, sending catalogs of products and services and sales promotion of the Company and/or its affiliates, and requesting for face-to-face visits or online meetings as to introduce such products and services, etc.;
4. providing the website visitors with more visitor-friendly website; and
5. other purposes that the Company notifies the data subjects of when the relevant Personal Data is first collected.
The Company may use Personal Data to contact its website visitors for the above purposes via post, fax, e-mail, SMS, telephone or any other means.
The legal basis for the Company’s use of Personal Data concerning its website visitors is one of the following:
1. legitimate business interest that is not overridden by interests that the relevant website visitor has to protect his/her Personal Data and/or privacy; and
2. consent of the website visitors (which the Company will ask the website visitor for such consent before processing the Personal Data).

5. Retention of Personal Data concerning website visitors

The Company retains Personal Data concerning website visitors in electronic/soft copy form in the Company’s computer system and in cloud provided by Hostneverdie with its server located in Thailand. With respect to cookies, please see paragraph 8 below.

The Company will retain Personal Data concerning website visitors for the following periods:

Type of Data	Period
Name-surname, address, telephone/mobile phone number, and email address of the website visitor when he/she contacts the Company through its website	2 months from the date on which the relevant website visitor contacts the Company through its website; and 1 year thereafter if the relevant website visitor has provided his/her consent for marketing communications by the Company and/or its affiliate(s), unless and until the relevant website visitor has withdrawn his/her consent.

With respect to cookies, please see paragraph 8 below.

The Company will ensure to erase or destroy or anonymize Personal Data concerning website visitors upon the end of the relevant retention period set out above, or erase or destroy or anonymize the Personal Data that is irrelevant or unnecessary as per the purpose of collection of such Personal Data or as requested by the relevant website visitor as the data subject who is entitled to such request, or erase or destroy or anonymize the Personal Data for which the relevant website visitor as data subject has withdrawn his/her consent (only in case the collection of relevant Personal Data requires consent).

6. Transfer and/or disclosure of Personal Data concerning website visitors

In order to address the website visitors’ enquiries, requests and/or comments and/or for the Company’s and/or its affiliates’ marketing purposes, the Company may disclose or transfer certain Personal Data concerning website visitors collected through the Company’s website (such as name-surname, address, telephone/mobile phone number, and email address of the relevant website visitor) to any of the following Company’s affiliates:
The disclosure mentioned above will be made on a limited basis and the Company will disclose only the Personal Data that are necessary to achieve the lawful purpose of the disclosure.
1. Yazaki Kako Corporation which is a company incorporated under Japanese law and located in Japan, if the collected Personal Data concerns an individual residing in Japan;
2. CREFORM Corporation which is a company incorporated under the law of United States and located in the United States, if the collected Personal Data concerns an individual residing in the United States;
3. CREFORM Technik GmbH which is a company incorporated under the European law and located in the European Union, if the collected Personal Data concerns an individual residing in the European Union;
In the event that the Company must obtain consent from the relevant website visitor as data subject pursuant to the Data Protection Law for disclosing any of his/her Personal Data to any of the affiliated companies set out above, the Company will request for such consent and must duly obtain such consent from the relevant website visitor before disclosure.

7. Marketing activities/communications

If a website visitor has provided his/her consent to receive the marketing communications from the Company or any relevant affiliate of the Company set out in paragraph 6.1 above, the Company or the relevant affiliate will send such website visitor marketing communications including, among others, information relating to its products and services, sales promotion, and other marketing events, and the Company or the relevant affiliate may, from time to time, contact such website visitor to request for a face-to-face visit or online meeting as to introduce such products and services.
The website visitor may withdraw his/her consent for marketing communications at any time by contacting the Company via any of the channels provided in paragraph 12 below to request for consent withdrawal. In case the consent withdrawal is with respect to any of the Company’s affiliates, the Company will pass on the website visitor’s consent withdrawal to the relevant affiliate and ensure that the relevant affiliate will proceed as per the website visitor’s intention.

8. The Company’s Use of Cookies

What are cookies?
Cookies are text files that are stored in a computer or mobile device via an internet browser. When visiting the Company’s website, the website sends the cookie to the visitor’s computer/mobile device which stores the cookie in a file located inside the visitor’s web browser. Many internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which internet pages and servers can be assigned to the specific internet browser in which the cookie was stored. This allows visited internet sites and servers to differentiate the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can be recognized and identified using the unique cookie ID.
How does the Company use cookies and the purposes for the use of cookies
The Company collects Personal Data concerning its website visitors (e.g. browsing actions and patterns) through cookies or other similar technology(ies). The Company’s website also uses cookies to enable the site to remember the visitors’ preferences (such as username, language, font size in which the relevant visitor wants to read the content on the web page etc.) for a certain period of time, make the Company’s websites operational, and gather analytics data (about visitor behavior).
Through the use of cookies, the Company can provide the visitors of the Company’s website with more visitor-friendly services that would not be possible without the cookie setting. By means of a cookie, the information and offers on the Company website can be optimized with the visitor in mind. Cookies allow the Company to recognize its website visitors. The purpose of this recognition is to make it easier for visitors to utilize the Company’s website. The website visitor that uses cookies, e.g. does not have to enter access data each time the website is accessed, because this is taken over by the website, and the cookie is thus stored on the visitor's computer system. In addition, the Company also uses cookies to establish anonymized statistics about the browsing experience on the Company’s website.
Types of cookies that the Company uses
1. Necessary Cookies: These are cookies that are necessary for the website to properly function. These include cookies that enable basic functions like page navigation and cookies that enable the visitors to log into secure areas of the website, etc. These cookies placed on visitors’ devices do not store any personally identifiable information and will generally be session cookies – see paragraph 8.4 below for further information. Visitors can set their browsers to block or alert them about these cookies, but then some parts of the Company’s website will not work.
2. Preferences Cookies or Functionality Cookies: These cookies allow the Company’s website to recognize the visitor’s preference in the past when the visitor returns to the website. This will enable the Company’s website to personalize the content of its website for the website visitors, and remember the visitors’ preferences e.g. preferred language, browsing font size. etc. or what the visitors’ usernames and passwords are so they can automatically log in.
3. Statistics Cookies or Performance Cookies: These cookies collect information about the number of visitors and how visitors use the Company’s website - as an anonymous visitor. None of this information can be used to identify the website visitors. These cookies are used to improve website functions and to aggregate statistics on how the Company’s website visitors reach and browse the Company’s websites.
Duration
Certain types of cookies are session cookies which are temporary and will be deleted after the visitor closes the browser.
Certain types of cookies are persistent cookies which encompasses all cookies that remain on the visitor’s hard drive until they are erased by the visitor or the visitor’s browser, depending on the expiration date of each cookie. All persistent cookies have an expiration date written into their code, but the duration may vary. The persistent cookies that the Company’s website uses will last no longer than 12 months, but the visitor can erase them prior to the expiration date.
Consent
The Company’s website visitors will be requested to provide their consent for Preferences Cookies/Functionality Cookies and Statistics Cookies/Performance Cookies. The visitors may have seen a pop up to this effect on his/her first visit to the Company’s website. Although the said pop up will not usually appear on subsequent visits, the website visitors may withdraw their consent at any time – please see paragraph 8.6 below for further information.
How to manage/disable cookies?
The data subject may, at any time, prevent the setting of cookies through the Company’s website by means of a corresponding setting of the internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an internet browser or other software programs. This is possible in all popular internet browsers. Please be aware that if the data subject deactivates the setting of all cookies in the internet browser used (including necessary cookies), functions of the Company’s website may not be entirely usable.

9. Data Subject’s Rights

A data subject is entitled to the rights in relation to the Personal Data concerning him/her as prescribed in the Personal Data Protection Law as follows:

Right to Withdraw Consent In case the Company relies only on a data subject’s consent as its lawful basis to collect, use and/or disclose the Personal Data, the data subject may, at any time, withdraw his/her consent. The Company will notify such data subject that withdraws his/her consent of the effects that may occur as a result of his/her consent withdrawal at the time of withdrawal.
Right of Access A data subject has the right to access and request a copy of Personal Data concerning him/her which are under the responsibility of the Company or request the Company to disclose its acquisition of such Personal Data for which he/she did not give consent.
Right to Data Portability A data subject has the right to receive the Personal Data concerning him/her from the Company in case the Company has made such Personal Data in the format that is commonly used and readable by automatic machine and can be used and disclosed by automatic means. A data subject also has the right to request the Company to send or transfer the Personal Data in such format to other data controller(s) if it can be done by automatic means and/or request to obtain the Personal Data in such format that the Company sends or transfers to other data controller(s), unless it is technically unfeasible.
Right to Object A data subject has the right to, at any time, object to the collection, the use or the disclosure of Personal Data concerning him/her under certain circumstances prescribed under the Data Protection Law.
Right to Erasure A data subject has the right to request the Company to erase or destroy or anonymize Personal Data concerning him/her under certain circumstances prescribed under the Data Protection Law.
Right to Restriction of Processing A data subject has the right to request the Company for restriction of its use of Personal Data concerning him/her under certain circumstances prescribed under the Data Protection Law.
Right to Rectification A data subject has the right to request the Company to rectify inaccurate Personal Data concerning him/her and ensure that the Personal Data concerning him/her is up-to-date, complete and not-misleading.
Right to Lodge Complaint A data subject has the right to lodge a complaint with the competent authority or committee under the Data Protection Law in the event that the Company including its employee(s) or contractor(s)/service provider(s) violate or fail to comply with the Data Protection Law.

The data subject can submit his/her application to the Company to exercise the rights under subparagraphs (1) – (7) above as per any channel set out in paragraph 12 below.

10. This Policy does not cover third party websites

Please note that this Policy does not apply to, and the Company’s not responsible for, the privacy practices of third-party website(s) which may be linked to this Company’s website.

11. Modification of Policy

The Company may review and revise this Policy on a regular basis as to ensure its consistency with the relevant guidelines and the Data Protection Law. The Company will notify the website visitors of such changes to this Policy by publicizing the updated Policy on the Company’s website as soon as possible.

12. Information about the Company and contact details

If a data subject has any question or suggestion in relation to the Company’s protection of Personal Data or wishes to exercise a right as data subject, please contact the Company as per the following contact details:

5.2. The Company will retain Personal Data concerning website visitors for the following periods:

Company’s Name:	CREFORM yazaki (Thailand) Co., Ltd.
Address:	9/103 Moo 5, Phaholyothin Road, Klong Nueng, Klong Luang, Pathumthani 12120, THAILAND
Contact Channels:	Telephone Number: 02-516-4812 Email: sale@creform.co.th Website: https://www.creform.co.th/

Privacy Policy on the Processing of Personal Data Concerning Website Visitors of CREFORM yazaki (THAILAND) CO., LTD.