+66 76 336 076 info@uwcthailand.ac.th

UWC Thailand Personal Data Protection Policy

UWC Thailand International School recognises the importance of the protection of our community’s personal data. This Personal Data Protection Policy explains our practices regarding the collection, use or disclosure of personal data including other rights of the data subjects in accordance with the Personal Data Protection Act of Thailand BE 2562 (“PDPA”).

1. Collection of Personal Data

We will collect personal data on our students, staff, parents, applicants, visitors and alumni that may include, but is not limited to the following:

  • Personal data such as name, surname, age, date of birth, nationality, identification card, passport, preferred pronoun, etc.
  • Contact information such as address, telephone number, e-mail address, etc.
  • Proof of identity such as copy of identification card, copy of passport, etc.
  • Family/guardian information 
  • Technical data such as IP address, Cookie ID, Activity Log, etc.

We may collect, use or disclose sensitive data that is specially categorised by law when we have obtained explicit consent from the data subject or the data subject’s parent or guardian or where necessary as permissible under law. We may collect, use or disclose the following sensitive personal data:

  • racial
  • ethnic
  • religious or philosophical beliefs
  • sexual orientation
  • health 
  • criminal 
  • any data which may affect the data subject in the same manner, as prescribed by the Personal Data Protection Committee (as defined in the PDPA).

The provision of all information requested in various forms from UWC Thailand is mandatory, unless specified otherwise. This is to enable us to process applications and/or provide educational services and/or provide employment. 

In general we will only collect personal data when it has been voluntarily provided directly by an individual or a relevant family member. The main points at which consent is sought from data subjects are at the following times:

  • When first applying to UWC Thailand, either as a prospective family or for employment
  • Upon acceptance of a place and/or re-enrolment as a student or an offer of employment as a staff member

This policy serves as the key information source for informed consent. Signing the Terms and Conditions of enrollment or an employment contract, which reference to this policy, serves as the consent process in these cases. We do not normally seek further consent for collecting or processing personal data unless the reason for that collection or processing is not covered under this policy. 

The personal data of data subjects under the age of 20 or having legal restrictions, may be collected, used or disclosed. We require the parents or guardians to be aware and provide consent to us or as permitted by applicable laws. 

2. Storage of Data

Personal data may be stored in hard and soft copy

Personal data will be stored by using the following systems:

  • Our server in Thailand
  • Third-party server service providers inside and outside of Thailand

3. Use of Data

We use the collected data for various purposes, including but not limited:

  • To process applications for admission and re-enrolment
  • To support the education and well-being of our students 
  • To maintain student and alumni records and to monitor and report on their progress
  • To improve products, services, or user experiences
  • To share and manage information within our organisation
  • To conduct marketing activities
  • To gather feedback and assess the performance of the School 
  • To process tuition fees and other payments 
  • To comply with our Terms and Conditions
  • To comply with laws, rules, and regulatory authorities 
  • To communicate information to government authorities, relevant accreditation authorities or examination boards
  • To provide appropriate personal and social care
  • To provide required reports to the UWC International Office and global programming initiatives (the way UWC International processes your data is governed by the UWC International Data Protection Policy, which is reviewed regularly and can be found 这里. UWC International may change this privacy policy from time to time.) 

In particular, we may: 

  1. make available information to any internal organisation or society set up for the purpose of maintaining contact with students or for administration, fundraising, marketing or promotional purposes relating to the school. UWC Thailand will remain as the data controller and this policy will govern data usage.
  2. make use of photographs, videos or sound recordings of students in internal publications, the school website and other official communication channels, as well as in external media.
  3. make personal data, including sensitive personal data, available to staff for planning activities and trips relating to the UWC Thailand learning programme, both in and outside of Thailand.
  4. retain and use personal data after a student has graduated to provide references, educational history and alumni services consistent with an independent school environment.

4. Disclosure of Personal Data

We may disclose personal data to the following parties in certain circumstances:

  1. Organisation

We may disclose your personal data within our organisation to provide and develop our products or services. 

  1. Service Providers

We may use service providers to help us provide our services such as ManageBac, SchoolsBuddy and OpenApply. In addition, we may share personal data to service providers insofar as they relate to a service provided to the school, such as transport, catering, travel, and medical care.  We will only share data for the purposes of obtaining a necessary service from these service providers and not for commercial gain. Please note that these service providers may have their own privacy policies

  1. Law Enforcement

Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by government authorities.

  1. Cross-Border Data Transfer

We may disclose or transfer your personal data to third parties, organisations or servers located in foreign countries. We will take steps and measures to ensure that your personal data is securely transferred, and the receiving parties have an appropriate level of personal data protection standard or as permitted by applicable law.

5. Data Retention

We will retain your personal data for as long as necessary during the period you are under relationship with us, or for as long as necessary in connection with the purposes set out in this Data Privacy Policy, unless law requires or permits a longer retention period. We will erase, destroy or anonymise your personal data when it is no longer necessary or when the period lapses.

6. Data Subject Rights 

The data subject has certain rights to access and rectify their personal information in our databases, as provided in the PDPA. Data subjects are encouraged to notify the school of any changes in a timely manner.

Any request to exercise the data subject’s rights under the PDPA should be directed to our Data Protection Officer as mentioned below. Any access request may be subject to an administrative fee to meet our costs for providing the requested information,

The PDPA does not provide the right of access to any and all information held by the organisation. Therefore, we retain the right to refuse access to: 

  • Opinion data kept for evaluative purposes
  • Examination papers or the results of examinations
  • Confidential references written to support a student’s application to other educational institutions or courses
  • Data or material that would provide personal data about other individuals in contravention of this policy or the PDPA.

7. Advertising and Marketing

We may send certain information or newsletter for the purpose of utilising your preference via your email. If you no longer want to receive the communications from us, you can click the “unsubscribe” link in the email or contact us through our email.

8. Data Security

We endeavour to protect the personal data of our students, staff, and alumni by establishing security measures in accordance with the principles of confidentiality, integrity, and availability to prevent loss, unauthorised or unlawful access, destruction, use, alteration, or disclosure including administrative safeguard, technical safeguard, physical safeguard and access controls.

9. Data Breach Notification

In the event of data breach, we will notify the affected data subjects pursuant to the requirements of the PDPA.

10. Changes to this Privacy Policy

This Data Privacy Policy may be changed from time to time. Any changes of this Data Privacy Policy will be made available to the data subject via our website.

11. Cookies Policy

Cookies are small text files that enable your browser to provide a better user experience. UWC Thailand uses cookies to anonymously save user preferences and provide data for 3rd party analytics software. The UWC Thailand website uses analytics services provided by Google Analytics. Google Analytics is a suite of tools designed to collect and analyse anonymous user data in order to optimise our website’s user experience. Cookies can be disabled in your browser, however, some website functionality relies on the use of cookies and some features of our website may not function correctly without cookies. We do not use cookies to identify or store personal information.

12. Contact Information

Any questions about this Data Privacy Policy or would like to exercise your rights, you can contact us by using the following details:

Data Controller

UWC Thailand International School

115/15, Thep Krasatti, Thalang, Phuket, 83110

pdpa@uwcthailand.ac.th

www.uwcthailand.ac.th

+66 76 336 076

Data Protection Officer

115/15, Thep Krasatti, Thalang, Phuket, 83110

pdpa@uwcthailand.ac.th

+66 76 336 076

zh_CNZH
分享到