Privacy Notice

This Privacy Notice (“Notice”) is designed to inform and help you, as a user of Transport Co., Ltd. (“TCL” or “we”), understand the collection, use, and disclosure (“processing”) of your personal data. TCL operates as a data controller or data processor, depending on the context, and processes your personal data for purposes described in this document.

TCL’s Business Operations

TCL operates passenger transport services:

1. Company-operated buses between Bangkok and other provinces.
2. Private joint-operated buses on routes licensed by TCL.
3. Bus terminals.
4. Parcel delivery services.
   
   

1. Legal Basis for Processing Personal Data

1.1 TCL processes personal data under the following legal bases:

• Contractual necessity: To fulfill contracts, including employment, service agreements, MOUs, or other agreements.
• Prevention of harm: To prevent or mitigate harm to life, body, or health (e.g., using applications to monitor diseases as part of government policies).
• Legal obligations: To comply with legal requirements, such as collecting computer traffic data under the Computer Crimes Act B.E. 2560, the Official Information Act B.E. 2540, tax laws, or court orders.
• Public interest or state authority: To perform tasks in the public interest under laws like the Digital Government Administration and Services Act B.E. 2562 and related regulations.
• Legitimate interests: To ensure TCL’s or others’ legitimate interests, such as maintaining facility security or processing personal data for internal operations.

1.2 TCL collects personal data under Section 26 without explicit consent in cases including:

• Emergency medical care: Collecting patient information from family members for unconscious patients.
• Disease control: Collecting COVID-19 symptoms data for public health purposes under the Communicable Disease Act.
  
  

2. Purposes for Collecting Personal Data

TCL processes your personal data for the following purposes:

1. To carry out public interest tasks assigned to TCL or fulfill legal obligations.
2. To provide and manage TCL’s services under contracts or TCL’s mission.
3. To conduct TCL transactions.
4. To monitor, manage, and improve services for your convenience and satisfaction.
5. To store and update relevant information and documents about you.
6. To maintain records of data processing activities as required by law.
7. To analyze data and resolve service-related issues.
8. To prevent, detect, and investigate fraud, security breaches, or illegal actions that may harm TCL or data subjects.
9. To verify and authenticate your identity when using TCL services or exercising your legal rights.
10. To improve and develop the quality of TCL’s products and services.
11. To send notifications, confirmations, and updates.
12. To prepare and deliver necessary documents or information.
13. To verify identity, prevent spam, or detect unauthorized or illegal activities.
14. To monitor and analyze how users access and use TCL’s services for research and analysis.
15. To ensure TCL’s or other entities’ legitimate interests related to TCL operations.
16. To prevent or stop harm to life, body, or health, including disease monitoring.
17. To prepare historical records, conduct research, or perform statistics-related tasks assigned to TCL.
18. To comply with laws, regulations, court orders, or exercise TCL’s legal rights.
    
    

3. Personal Data Collected and Used

To achieve the purposes outlined in Section 2, TCL collects the following personal data:

                 3.1 Sources and Types of Personal Data Collected

                 3.2 Purpose of use of personal data

4. Disclosure of Your Personal Data

We disclose your personal data to individuals or entities as follows:

• 4.1 Government agencies or authorities to which TCL must disclose data for legal purposes or other significant public benefit objectives.
• 4.2 Business partners to facilitate the provision of services.
• 4.3 Public disclosure of basic data only when necessary, such as through TCL’s website, bulletin boards, or announcements via social media.

5. Your Rights Under the Personal Data Protection Act B.E. 2562

The Personal Data Protection Act B.E. 2562 aims to give you greater control over your personal data. You can exercise the following rights once the relevant provisions take effect:

5.1 Right to Access: You have the right to access, obtain copies, and request the disclosure of the source of your personal data, except where we are legally entitled to refuse (e.g., court orders or cases where disclosure may harm others’ rights and freedoms).

5.2 Right to Rectify: You can request corrections or updates to ensure the data is accurate, complete, and up to date.

5.3 Right to Restrict Processing: You may request restriction of data use in the following cases:

• 5.3.1 When verifying the accuracy of your data upon your request.
• 5.3.2 When your data has been unlawfully collected, used, or disclosed.
• 5.3.3 When the data is no longer needed, but you wish to retain it for legal purposes.
• 5.3.4 When verifying the legitimacy of data collection or use following your objection.

5.4 Right to Object: You may object to the collection, use, or disclosure of your data, except where we have legitimate legal grounds to refuse (e.g., for public benefit, legal claims, or to perform legal duties).

6. Retention Period for Personal Data

We retain your personal data for up to 10 years or as instructed by authorities, starting from the termination of the relationship or last contact with TCL. Data may be retained longer where permitted by law.

Once the retention period ends, we will:

• Delete or destroy the data when it is no longer needed.
• Anonymize the data for statistical analysis, performance improvement, or significant public benefit.

7. Security Measures for Personal Data

We implement appropriate technical and administrative measures to secure your data against loss, unauthorized access, destruction, alteration, or disclosure. These measures align with our Information Security Policy to ensure:

• Confidentiality: Protect data from unauthorized access.
• Integrity: Ensure data accuracy and completeness.
• Availability: Ensure data remains accessible when required.

We periodically review this policy and relevant guidelines to maintain data security.

8. Participation of Data Subjects

We will only disclose personal data upon request from the data subject, heirs, legal representatives, guardians, or custodians. Requests can be submitted via E-mail: pdpa@transport.co.th.

If you object to data collection, accuracy, or specific actions, we will record your objection as evidence.
However, we may decline certain requests where permitted by law or if the data has already been anonymized.

9. Responsibility for Processing Personal Data

We restrict access to personal data only to authorized personnel responsible for collecting, using, and disclosing such data. All personnel must strictly comply with this declaration.

10. Amendments to This Privacy Notice

We may update or amend this notice as deemed appropriate and will notify you through www.transport.co.th with the latest version’s effective date.

We recommend reviewing this notice regularly. Continued use of services after updates will be deemed as acceptance of the amended terms. If you disagree with any changes, please discontinue use and contact us.

11. Contact Information

For questions or concerns about this notice, you may contact:

• Data Protection Officer (DPO)
• Name: Transport Co., Ltd. (TCL)
• Address:
  4th Floor, Bangkok Bus Terminal (Chatuchak),
  999 Kamphaeng Phet 2 Road,
  Chatuchak District, Bangkok 10900
• Contact Channels:
  • E-mail: pdpa@transport.co.th
  • Line ID: @tcl99