Mitsubishi Electric’s handling personal data of website users according to Personal Data Protection Act (PDPA)

Privacy Policy Announcement

PDPA (Personal Data Protection Act)

1. Introduction
Mitsubishi Electric Factory Automation (Thailand) Co., Ltd. (hereinafter referred to as “MELFT”)
Head Office No. 101, 5th Floor, True Digital Park Office Building, Sukhumvit Road, Bang Chak Subdistrict, Phra Khanong District, Bangkok 10260 has prepared and published this Privacy Statement (“Statement”) to clarify the details of the collection, use, or disclosure of personal data, including methods for protecting personal data and guidelines for the appropriate management of such data in accordance with the Personal Data Protection Act B.E. 2562

This Privacy Statement is applicable to the following individuals:

MELFT Customers
      (1) Individual Customers: General customers, customers who have registered on this website, existing and current customers of MELFT who are individuals.
           Corporate Customers: Directors, shareholders, beneficial owners, employees, guarantors, guarantors, and legal representatives of existing corporate customers.
           and current Including other natural persons who are authorized to act on behalf of corporate clients. MELFT recommends that any corporate clients take steps to ensure
           that the authorized representative or any related natural persons are aware of MELFT's Privacy Policy Notice.

      (2) Non-MELFT Customers
      Such persons include natural persons who do not have products or services with MELFT but MELFT may need to collect, use or disclose your personal data, such as investors, persons who have visited the MELFT website or application or used the services at MELFT's branches or head offices, guarantors or guarantors, beneficiaries, directors or legal representatives of companies using MELFT's services, debtors or lessees of MELFT's customers, professional advisors, including directors, investors and shareholders of MELFT and their legal representatives, and any person involved in a transaction with MELFT or a MELFT customer.


MELFT would like to inform you that MELFT will not collect personal data that is not necessary for the processing of the purposes for which it is with you. However, if any action is taken to achieve such purposes, MELFT may receive sensitive personal data that appears in identity documents, such as religious information on the national ID card, where such sensitive personal data is not necessary for the purpose of MELFT. Please request that you anonymize such sensitive personal data before submitting it to MELFT. If such personal data cannot be anonymized for any reason, MELFT will only collect such sensitive personal data as part of the data set that MELFT needs to use to fulfill the purpose with you and will not process such sensitive personal data in any way. In the event that MELFT needs to process such sensitive personal data for any purpose, MELFT will seek your explicit consent in accordance with the law.


MELFT does not intend to collect and process personal data of minors under the age of 10. In the event that a minor under the age of 10 wishes to inquire about or use the website, application, receive services, or enter into any contract with MELFT that requires the minor to submit personal data to MELFT, the parent or guardian of the minor shall proceed to do so on behalf of the minor. In the event that the minor is over the age of 10 but has not yet reached the age of majority and cannot act on its own by law and in such action, personal data of the minor (such as your name, address, email address) must be provided to MELFT. MELFT may seek such consent directly from the parent or legal guardian of the minor or may require the minor to notify the parent or legal guardian to consent to the action in such matter to MELFT.


Please note that links appearing on the MELFT platform may direct you to third-party platforms, and if you access such third-party platforms, the processing of your personal data will be subject to the privacy policies of such third parties. Therefore, MELFT recommends that you read and understand the privacy policies of such third parties when you use such platforms.


2. Details of collection, use or disclosure of personal information

       2.1 MELFT Customers
           2.1.1 Personal Data that MELFT collects, uses or discloses and the sources of the data
          (1) Personal Data that MELFT collects, uses or discloses
MELFT collects several types of personal data, including the following:
            • Identity Data such as name, surname, national ID card number, passport number, date of birth, gender, age, nationality, marital status
             Photograph And in some cases, MELFT may process sensitive data such as race, religion, fingerprints, with your explicit consent or
            • Contact Data such as address, phone number, email, LINE ID, Facebook account
            • Financial or transaction data such as credit card numbers ATM card number, income information, product transaction information
               or MELFT service
            • Data for contacting MELFT (Communication Data) such as data for recording images or sounds when contacting MELFT
            • Location information, such as IP address or GPS location information
           (2) Sources of information
MELFT may collect your personal information from various sources, including:
           (2.1) receive personal data directly from you, such as
            • Steps to apply for our services Sign the contract Fill out the form Complete the questionnaire Register or steps to submit a claim or request to exercise rights
            • Contacting MELFT through various channels such as website, phone, email, LINE, Facebook Messenger, etc.
            • Information on participation in various MELFT activities, such as still image recordings or video
            • MELFT may automatically collect information, such as when you access the MELFT website and/or application, etc.
          (2.2) Receive your personal data from other sources, such as
            • MELFT's customers, agents or service providers MELFT
            • Companies in the MELFT group or business partners of MELFT
            • Government agencies or other public information sources, such as the company's website, information searchable on the Internet Or on various social media platforms
              such as Facebook LINE, etc.

           2.1.2 Purpose of collecting, using or disclosing personal data
MELFT collects, uses or discloses your data for various purposes depending on the nature of your relationship with MELFT, as follows:
Purpose of data processing
            (1) For consideration of approval of application for use of products or services or entering into a contract between you or the legal entity that you represent and MELFT
            (2) For the use of products, benefits or various services of MELFT, including products, benefits or various services of companies in the group and business partners
                 MELFT's existing business together, performance of contracts complying with MELFT's internal processes, receiving or sending information or contact documents,
                 including to comply with the regulations of government agencies that are necessary for the performance of the contract between you and MELFT
            (3) To participate in various activities of MELFT and its group companies operated by MELFT, its group companies or external parties, such as lucky draws, prize quizzes,
                 training, seminars or field trips, etc.
            (4) For the purpose of evaluating, improving and developing MELFT's products, services and various sales promotions
            (5) To comply with legal obligations and law enforcement requests Including reporting or disclosing information to government agencies in accordance with the law
            (6) for the purpose of checking compliance with the law, establishing legal claims, complying with or exercising legal claims or raising fighting legal claims
            (7) To carry out business planning, reporting and forecasting
            (8) To prevent corruption, investigation, inquiry Or any other legal process
            (9) For the purpose of maintaining security within the building, premises of MELFT, including exchanging cards before entering the said area, recording images of those
                 who come into contact with MELFT at the building, premises of MELFT with CCTV cameras
            (10) For the purpose of risk management, supervision, inspection and management within the organization
            (11) To maintain relationships with MELFT customers, such as contacting and coordinating inquiries, managing suggestions and feedback, offering benefits
            (12) To provide information about products or services, benefits, sales promotions, marketing activities Invitation to join the event
                 And present the products or services of MELFT and the group companies, such as training courses, seminars, promotions
            (13) To explore the needs, satisfaction and opinions regarding MELFT products and services and analyze member usage data, spending history or service use and
                 your interests for use in offering MELFT products or services, including developing MELFT products and services to be appropriate and meet your needs.
            (15) For disclosure to companies in the group, business partners of MELFT to develop services, offer benefits and offer other products or services of
                 MELFT, companies in the group and partners that are currently and will be jointly established in the future Including news of benefits
                 and various sales promotions
            (16) To download user manuals, drawings and various software, including booking training courses and seminars within the website

            2.1.3 Duration of Retention of Personal Data
MELFT will retain your personal data for the period necessary for the purposes for which it was collected, used or disclosed as set out in this Privacy Statement. The criteria used to determine the retention period are the period for which MELFT is conducting its relationship with you and providing services to you, and may be retained for a period necessary to comply with the law or statute of limitations, to establish legal claims, exercise or defend legal claims, or for other reasons in accordance with MELFT’s internal policies and requirements.

           2.1.4 Disclosure
In carrying out the purposes set out in this Notice, MELFT may disclose customer information to the following third parties:

            (1) any subsidiaries, affiliates and related companies
                 (meaning (1) a company holding shares in MELFT and/or any company in which MELFT holds shares, and (2) a company that is a successor to any of the companies
                 in (1) above, whether directly or indirectly) for the purposes of conducting business, internal administration, offering other products and services that may be of interest
                 to you. Including any other activities as specified in the Privacy Statement
            (2) Government agencies, regulatory agencies, or other agencies as prescribed by law, including officials exercising legal authority
            (3) Agents, contractors/subcontractors, and/or service providers for any operations, such as
                 • Transportation service providers, card preparation or destruction service providers, document storage and destruction service providers, printing houses,
                 marketing activity companies, research companies hired to develop and maintain information technology systems Accommodation and travel agency
                 • Auditors, lawyers, legal and tax consultants, any consultants
            (4) MELFT's business partners or third parties as permitted by you or as required by the contract or as required by law, as the case may be

       2.2 MELFT's Partners
           2.2.1 Personal Data Collected, Used or Disclosed by MELFT and Sources of Data
           (1) Personal Data Collected, Used or Disclosed by MELFT
MELFT collects various types of personal data, including the following:
           • Identity Data, such as name, surname, national ID card number, passport number, date of birth, gender, age, nationality, marital status
             photographs and in some cases, MELFT may process sensitive data, such as religious information, fingerprints, health information or criminal records.
             With your express consent or as required by law.
           • Contact Data, such as address, telephone number, email, LINE ID
           • Financial or transaction data (Transaction Data) such as bank account numbers, financial status history
           • Communication data with MELFT (Communication Data) such as data recording images or sounds when contacting MELFT
           • Data on participation in various MELFT activities such as still image recordings Or video
           • Data for monitoring the performance of the contract, such as data for recording images and sounds during the performance of the work
           • Data about location, such as IP address or GPS location data
            (2) Sources of Information
MELFT may collect your personal information from various sources, including:
           (2.1) Personal information is received directly from you, such as:
            • Procedures for requesting services or performing requests before entering into a contract, signing a contract, filling out forms, completing questionnaires, registering, etc.
              or the process of submitting a claim
           • Contacting MELFT through various channels, such as by phone, email, FACEBOOK, LINE, etc.
           • MELFT may automatically collect information, such as when you access the MELFT website and/or application.
           (2.2) Obtain your personal data from other sources, such as:
           • MELFT representatives or service providers
           • MELFT group companies or MELFT business partners
           • Government agencies or other public information sources, such as the Company's website Information that can be found on the internet or on various
              social media platforms such as Facebook, etc.

           2.2.2 Purpose of collecting, using or disclosing personal information
MELFT collects, uses or discloses your information in the capacity of a registered business partner or business partner or director, representative, or authorized person. Or an operator on behalf of an individual or juristic person who has registered as a business partner or a business partner of MELFT for various purposes depending on the nature of the relationship between you and MELFT as follows:
Purpose of Data Processing
           (1) To consider your qualifications before entering into a contract with MELFT
           (2) To consider approving the conclusion of a contract between you and MELFT
           (3) To perform the contract and monitor the performance of the contract between you and MELFT, compliance with the internal processes of MELFT
                Receiving or sending contact documents between you and MELFT, issuing building entry cards, premises
           (4) To comply with legal obligations and law enforcement requests, including reporting information to government agencies in accordance with the law
           (5) To consider the qualifications of your employees or agents Auditing the performance of your employees or agents
           (6) To verify compliance with the law, establish legal claims, comply with or exercise legal claims, or raise
                Defend legal claims
           (7) To conduct business planning, reporting and forecasting.
           (8) For any investigation, inquiry or legal process.
           (9) For security purposes within the MELFT premises, including card redemption prior to entry into such premises. Recording of people who come into contact with
                MELFT at MELFT buildings and locations with CCTV cameras
           (10) For risk management, audit supervision and internal management of the organization To monitor and supervise the performance of your employees or agents
                via CCTV to monitor and maintain security during the performance
           (11) To invite you to participate in various activities conducted by MELFT or external parties. Including communication about such activities
                Which will record your images and voice while participating in such activities
           (12) To be a database of MELFT for consideration in selecting partners and/or selecting employment for other projects in the future

            2.2.3 Duration of Retention of Personal Data
MELFT will retain your personal data for the period necessary for the purposes of collecting, using or disclosing the personal data as specified in this Privacy Statement. The criteria used to determine the retention period include the period for which MELFT is in a relationship with you, and may be retained for a period necessary to comply with the law or the statute of limitations, as applicable, for the establishment, exercise or defense of legal claims, or for other reasons in accordance with MELFT's internal policies and regulations.

            2.2.4 Disclosure of Data
In order to carry out the purposes specified in this Statement, MELFT may disclose your information to the following third parties:

      (1) any subsidiaries, affiliates and related companies
          (meaning (1) a company that holds shares in MELFT and/or any company in which MELFT holds shares, and (2) a company that is a successor to any of the companies
           in (1) above, whether directly or indirectly) for the purpose of conducting business, internal administration, offering other products and services that may be of interest
           to you including any other activities as specified in the Privacy Statement
      (2) Government agencies, regulatory agencies, or other agencies as prescribed by law, including officials exercising legal authority
      (3) Agents, contractors/subcontractors, and/or service providers for any operations, such as
          • Transportation service providers, card preparation or destruction service providers, document storage and destruction service providers, printing houses, marketing activity companies, research companies
            Companies hired to develop and maintain information technology systems Building Management Company
          • Auditors, lawyers, legal and tax advisors, any advisors
      (4) MELFT's business partners or third parties with your consent or as required by the contract or as required by law, as the case may be

3. Legal basis for processing personal data
MELFT will process personal data only to the extent necessary within the scope of this Privacy Statement in the following cases:
      (1) To take steps requested by you prior to entering into a contract and for the performance of the contract between you and MELFT
      (2) Where it is necessary to comply with a legal or regulatory obligation to which MELFT is subject
      (3) Where MELFT is required to take action for the purposes of its legitimate interests, except where the interests or fundamental rights and freedoms of individuals
           override such interests
      (4) Where we have received your express consent (only in cases where required by law)
      (5) In cases where MELFT is required to take action for the establishment, exercise or defense of legal claims,
           Legal claims
In cases where the personal data collected by MELFT above is necessary for MELFT to perform the contract or comply with applicable laws, if you do not provide such necessary personal data, MELFT may be liable and/or unable to administer or manage the contract or provide certain facilities to you.

4. Your rights as a data subject
      4.1 Your rights under the Personal Data Protection Act B.E. 2562
You have the rights under the Personal Data Protection Act B.E. 2562 to do the following:
      (1) Right to Withdraw Consent
           You have the right to withdraw your consent to MELFT to collect, use or disclose your data at any time. In accordance with the procedures and methods as determined by
           MELFT unless the withdrawal of consent is restricted by law, the situation is unable to withdraw consent, or the contract benefits you.
           However, the withdrawal of consent will not affect the processing of personal data that you have previously given consent to MELFT in accordance with the law.
           In addition, in some cases, if you withdraw your consent, you may receive less convenience in using the products or services. and or miss the opportunity to receive
           Other future benefits and special offers, or suffer some other impact in using MELFT products or services
      (2) Right to Access
           You have the right to request access to and a copy of your personal data held by MELFT, including requesting that MELFT disclose the source of such personal data to which you have not given consent.
      (3) Right to Data Portability
           Where MELFT has made the Personal Data in a commonly used, human-readable format using automated tools or devices and is able to use or disclose the Personal Data by automated means,
           MELFT, including the following rights:
                   (3.1) Request that MELFT transmit or transfer your personal data in such format to another data controller where this can be done by automated means
                   (3.2) Request the personal data that MELFT Send or transfer personal data in such format directly to another data controller
                            Unless technically impossible
      (4) Right to object to the collection, use or disclosure of personal data (Right to Object)
           You have the right to object to the processing of data about you in cases where personal data is collected, used or disclosed for marketing purposes.
           Direct and other cases as prescribed by law.
      (5) Right to erasure of personal data (Right to Erasure)
           You have the right to request that MELFT erase or destroy or anonymize your personal data for the reasons specified by law.
      (6) Right to Restriction of Processing
           You have the right to request that MELFT restrict the use of your data for the reasons specified by law.
      (7) Right to Rectification
           MELFT endeavors to keep your personal data accurate, current, complete and not misleading. However, if you believe that the information MELFT holds is incorrect,
           or if you have changed your personal data yourself You have the right to request MELFT to correct your personal data to ensure that such personal data is
      (8) Right to lodge a complaint
           You have the right to lodge a complaint with an authorized officer under the Personal Data Protection Act B.E. 2562 when MELFT violates or fails to comply with the Act.

      4.2 Channels for exercising rights
      You can exercise your rights as a data subject above through the channels in Section 8. In the event that you wish to exercise your rights under the law on the protection of
      This personal data, please request a “MELFT Request Form” through the channels above. and send the completed form via email dataprotection@mitsubishifa.co.th

      4.3 Period for the exercise of rights
      MELFT will proceed according to your request to exercise your rights as a personal data owner within the period prescribed by law, such period shall start from the date on
      which MELFT receives all necessary information to exercise your rights until the processing of your request to exercise your rights is completed, your personal data stored in
      MELFT's database will not change in any way, and may continue to be processed, and you may be contacted by MELFT, MELFT's partners or persons who hold
      your personal data.

      5. Measures for the Security of Personal DataImplementation of measures for the security of personal data MELFT has put in place appropriate security measures to protect against the unauthorized or unauthorized loss, access, use, alteration, modification or disclosure of personal data, as follows:
           5.1 MELFT provides access level definition and changes the password of employees involved in accessing and using information
                 to maintain the security of personal information.
           5.2 MELFT has implemented security measures appropriate to the risks arising from technological developments, including the following:
                  5.2.1 Maintaining the security of the premises, units and personnel through appropriate methods of selection, separation of duties, training and assignment of tasks
                           to employees to perform their duties, and all employees are bound by agreements not to disclose information and news.
                  5.2.2 Security of computer systems and information systems by separating the work of the computer system, controlling access to the computer system,
                           detecting intruders and tracking and controlling changes to the computer system.
                  5.2.3 Information security through data classification, methods for storing important data, and methods for managing data recorded on paper.
                  5.2.4 Maintaining security in communications and communication network systems by controlling access to the communication network system, backing up
                           and restoring data, controlling the transmission of data over the network, checking for data discrepancies, and controlling remote access to computer systems.
                  5.2.5 Business Disruption Prevention Plan
           5.3 MELFT does not access computer data that has specific access protection measures, nor does it intercept other people's computer data while it is in transit
                 through the Company's network in any form, unless permitted by law.

6. Disclosure of personal data to data processors
MELFT shall appropriately supervise other persons whom MELFT has entrusted to process personal data on the instructions or on behalf of MELFT.

7. Use of Cookies
MELFT collects information from your use of the MELFT website via your Browser’s cookies*. MELFT may collect and use cookies and similar technologies on the Company’s web pages when you use MELFT’s products, services and/or websites, including any transactions through such channels of MELFT.
In order to make it more convenient for the Company’s customers to use the website, MELFT uses cookies so that the Company’s website can identify your computer and remember your information when you return to use the website. MELFT will never use cookies to collect personal information of its customers.
*Cookies are small text files (usually containing only letters and numbers) that are placed in the memory of your browser or on your device when you visit a website or browse a message. They enable the Company to recognize a specific device or browser, and enable the Company to provide content more quickly and to tailor its services and platforms to your individual interests, making them more convenient and useful to you.

8. Contact details
In case of any doubts or inquiries regarding the protection of your personal data, the collection, use or disclosure of your data, the exercise of your rights or any complaints, you may contact MELFT through the following channels:
Company:    Mitsubishi Electric Factory Automation (Thailand) Co., Ltd.
Address:    101, True Digital Park Office, 5th Floor, Sukhumvit Road, Bangchak, Phra Khanong, Bangkok 10260 Thailand
      • Phone: +66-2 092 8600
      • E-Mail: dataprotection@mitsubishifa.co.th
      • Website: www.mitsubishifa.co.th
      • Line Official Account: @mitsubishifa.th
      • Facebook: Mitsubishi Electric Factory Automation – Thailand

9. Accessing other websites through the MELFT website
This privacy statement applies only to the sale of products or services and the use of the MELFT website. If you visit another website, even through the MELFT website, the protection of various personal information will be in accordance with the privacy statement of that website, which is not affiliated with MELFT.

10. Amendments to the Privacy Statement
MELFT periodically reviews and may amend this Notice as appropriate to ensure that your personal information is adequately protected. If this Statement is materially amended, MELFT will notify you through the appropriate channels.

*Last updated on May 31, 2022
This Privacy Notice was made on April 1, 2020.
Mitsubishi Electric Factory Automation (Thailand) Co., Ltd.
101, True Digital Park Office, 5th Floor, Sukhumvit Road, Bangchak, Phra Khanong, Bangkok 10260 Thailand