This website uses cookies to improve the performance and experience of your use of the website. You can check the details at Cookies Policy.

1. Definition
“Personal Data” means any information relating to a Person, which enables the identification of such Person, whether directly or indirectly, but not including the information of the deceased Persons in particular
“Person” means a natural person
“Process or Processing” means collection, use, or disclosure of the Personal Data

2. Categories of Personal Data
We collects, uses and discloses Personal Data according to criteria of persons i.e. our employees, customers, business partners, visitors. The Personal Data that is collected, used and disclosed consists of identifying data, contact details, employment data, financial data, communication data/IT information, data necessary for legal compliance. Information about categories of Personal Data collected by Design LAB Co., Ltd. is described in detail in the privacy notices mentioned in 4.

3. Personal Data Source
We receives your Personal Data directly from you e.g. in a recruitment process, when entering into a contract with you, a request to exercise your rights or to use out services, in communication process, in a process of requesting for your consent when needed.
In addition, We may receive your Personal Data from other sources which is not directly from you. We have ensured that such sources have a lawful right in disclosure of your Personal Data and comply with our acquisition procedure of Personal Data determined by us).

We will obtain Personal Data by lawful and fair means and use such Personal Data within the scope of its business and to the extent that it is subject to the purposes we specifying in the privacy notices mentioned in 5. This includes before or when collecting certain Personal Data of yours from you, We must always obtain your explicit consent e.g. certain Personal Data must be collected for protection of life, body or health of a person where the data subject is incapable of giving consent or compliance with other legal obligations etc.

4. Processing Purposes and Legal Basis
We collect your Personal Data of the data subject for the achievement of processing purposes and relies on legal basis for processing Personal Data under the applicable laws specified in the privacy notices as the following:

1.Employee & Job Applicant Privacy Notice
2.Business Partner & Visitor Privacy Notice
3.Customer Privacy Notice

We will ensure that our staffs within our company acknowledge and understand about your Personal Data managing procedures as describe in the guideline for Personal Data Protection Act B.E. 2562 (2019).

5. Recipients
We restrict an access to Personal Data only to those in our departments and persons within our group company, including third persons and processors. Such access is granted only on a need to know basis to the extent required to comply with a contractual or statutory obligation.

For any transfer of Personal Data outside out of Thailand, we have set a procedure regarding Personal Data transferring to other countries for when we shall consider a transfer of Personal Data outside of Thailand in a manner that is permitted and in the same standard that is stipulated in the Personal Data Protection Act B.E. 2562 (2019).

We will transfer Personal Data to the countries or international organizations which have an adequate standard in protection of Personal Data only. Nonetheless where we needs to transfer Personal Data to countries where a sufficient protection of Personal Data standard has not been reached, we will ensure that such transfer of Personal Data falls within the exemptions permitted by the law e.g. such transfer is conducted for the purpose of proofs or evidence searching for an administrative action of a regulator or a data subject has been informed of such transfer, an inadequate standard of protection of Personal Data and granted us his/her consent to such transfer of Personal Data or when such transfer is necessary to perform a contractual obligations which such data subject is a contractual party or to perform any operations as requested by a data subject etc.

6. Retention Period
Your personal data is stored by us and/or our service providers, to the extent necessary for the performance of our obligations and for the time necessary to achieve the purposes for which the information is collected, in accordance with the Personal Data Protection Act B.E. 2562 (2019).

We no longer needs to use your personal data to comply with contractual or statutory obligations, we will remove it from our systems and records and/or take steps to properly pseudonomize/anonymize it, so that you can no longer be identified, unless we need to keep your personal data, to comply with legal or regulatory obligations to which we are subject to and to establish, exercise or protect our legal rights.

7. Your Rights
According to Personal Data Protection Act B.E. 2562 (2019), as a data subject of your Personal Data you may exercise your rights as follow:

  • Right to withdraw consent
  • Right to access
  • Right to data portability
  • Right to object
  • Right to erasure
  • Right to restriction of processing
  • Right to rectification

We will ensure that our staffs and the data protection officer understand and acknowledge their responsibilities and steps to respond to events where we detects a breach of your Personal data protection for instance:

  • Notifying to the data protection officer within 24 hours when detected or notified of such breach of Personal Data protection
  • The data protection officer shall assess the risk of such notified breach and set a measure or a proper procedure for each case and shall identify whether such breach must be notified to the commission of personal data protection and to a concerned data subject according to the Personal Data Protection Act B.E. 2562 (2019).
  • In all cases that a staff is not sure whether any actions or activities are prohibited or sufficient to all procedures regarding Personal Data protection of us or to the Personal Data Protection Act B.E. 2562 (2019), the staff shall consult the data protection officer.

8. Changes to Privacy Policy
We may amend this Privacy Policy to be in compliance with the Personal Data Protection Act B.E. 2562 (2019), other relevant laws which may be amended in future, including our operation. We will notify any changes or amendment to this Policy according to such laws.


Design LAB Co., Ltd.,
Contact :

| Privacy Policy | Cookies Policy |