Responsive image

Personal Data Protection Policy

Chulalongkorn University Academic Testing Center


Chulalongkorn University Academic Testing Center (hereinafter referred to as the “Testing Center”)adheres to the code of ethics, respects the privacy rights, and comprehends the importance of personal data protection. Such personal data (hereinafter referred to as “policy”) will be collected and analyzed by data processors of the online systems as designated.

Who are the persons whose personal data we can process?

Types of people Details and examples
People using CUATC’s service
("Applicant")
  • Use or used the service
  • Contact for service inquiries
  • Acknowledge service information via different methods
    		•
    General people General people who are interacted by CUATC, giving personal data directly or indirectly to CUATC

    Data Collection Channels

    CUATC may collect data via the following methods.
     

  • Data given directly to CUATC
    •  
  • Personal data from a third-party

    • Personal data that CUATC collects, uses and/or discloses

    Types of Data Examples of Data that CUATC collects, uses and/or discloses
    Personal data Title, given name, middle name (if any), family name, gender, birthday, age, nationality, signature, data on document issued by the government (e.g. copy of national ID card, copy of passport, copy of the alien certificate, copy of government/ state enterprise official ID card, copy of house registration, copy of the birth certificate, copy of name change certificate, copy of driving license, or similar identification document) KYC data, and other relevant data
    Contact data Residential address, current address, telephone number, mobile number, e-mail
    Educational data Data on copy of student ID card, highest educational level, career fields
    Financial data Bank account number, bank name, bank account name
    Technical data, tools Application use data, IP address or Mac address, Cookies ID, Log, other technical data from platform or operational system use
    Other data Test registration data or other activities, including test history and test results by CUATC


    Personal Data Storing

     

  • Limit the access of personal data that may be accessible by the staff
    •  
  • Provide technological methods to prevent the unauthorized computer system access
    •  
  • • Provide management process of personal data breach or suspected personal data breach and notify the situation to the Personal Data Protection Committee, according to the conditions specified by law


    • Objectives of Collecting, Using and/or Disclosing Your Personal Data

    Objectives Details and Examples
    CUATC certifies not to use your collected personal data for other objectives, but for the legitimate use or for operation of CUATC only. For instance:
  • For projects of CUATC; for the benefit of study, research, service development statistics, marketing, public relations
  • For improving, developing, and optimizing the website
  • For receiving complaints
  • For contacting via phone, messege, e-mail, post, or via any methods for further inquiry or notice, data confirmation or opinion poll (as necessary)
  • For your service usage information that to comply with the law which can be changed in the future. CUATC shall not sell, transfer, or publish the data in the public.
    		•
    CUATC may reveal your personal data in public, when the data complies with the law or follow the court/government agency order for the purpose of investigations by law enforcement officers or court proceedings
    If CUATC hires other agency to operate data usage that CUATC controls, CUATC shall assign the agency to remain the data confidential. Do not use the personal data for other objectives, but for the objectives of CUATC only.


    Use of Personal Data in Conjunction with External Agencies


    CUATC may connect your personal data to another person or agency. CUATC shall notify before connecting personal data, including asking for consent as the following details:

  • Person or agency that associate the personal data
  • Objectives of personal data connection
  • Procedures of personal data connection
  • Personal data connection

    • Should personal data connection be changed, CUATC shall notify and ask for consent before operation.


    Personal Data Storing Duration

    CUATC collect your personal data in the necessary period, in order to operate by the objectives of CUATC, and according to the period specified by the accounting standards, legal standards, and other related regulations


    Personal Data Owner Rights

    Personal Data Owner Rights Details
    Right to Access You are able to request a copy of your data to check whether or not CUATC has processed your data as required by the law.
    Right to Transfer Personal Data When CUATC has personal data that can be easily read, used, or revealed with automatically devices. You can request to automatically transfer personal data to another agency, or receive personal data at CUATC and transfer directly to another agency, unless the technical conditions are unabled
    Right to Object You have the right to raise your objections in cases where we have processed your personal data.
    Right to Restrict Processing You can request to that the processing of your personal data be stopped in the following instances:
  • While in the process of checking matters when you have requested that your personal data be amended.
  • When the personal data needs to be erased or destroyed but you have asked that their usage be halted instead.
  • When he personal data no longer needs to be stored according to its objectives, but you find it necessary to request that they be kept in order to establish the right to legal demands, adherence or the right to fight for legal demands.
  • While in the process of proving or examining in accordance with your request to use your objection rights.
    		•
    Right to Rectification You are able to request that your personal data be amended, corrected or updated if you have found that your data is incomplete, inaccurate or not current, CUATC is unable to check or amend such data ourselves since in some cases or under certain circumstances we may not be able to process your requests for example if there is a need to fulfill one’s responsibilities in accordance with a contract or law. However, in such cases where you have given your consent for your personal data to be processed you may be able to revoke your consent at any time by contacting the related work section after which CUATC will halt the personal data processing as soon as possible. Even though the revoking of that consent does not have any effect as revoking the processing of personal data that has already taken place. Please be assured that CUATC will record all the items we have processed in connection with your request to be used in solving the problems that have occurred.
    Right to Erasure You are able to request that your data be erased or destroyed or so that the data cannot identify you as the owner in the following cases:
  • When personal data processing is no longer needed.
  • When you have revoked your approval for personal data processing and CUATC no longer have the reason to continue processing personal data legally.
  • When you have already expressed objection to the processing of your personal data.
  • When the personal data is illegally processed
    		•


    Reference fromPersonal Data Protection Policy Chulalongkorn University


    Revisions to Personal Data Protection Policy

    CUATC may occasionally revise personal data protection policy to accord with service changes, operation of CUATC, and your kindly suggestions. CUATC shall notify the changes before operating or send the announcement to you directly.


    The Review of Personal Data Protection Policy

    CUATC reserves the rights in revising and improving this policy as appropriate. For this reason, we ask that you kindly go through the policy for personal data protection on a regular basis. Any changes or alterations will be taken into effect immediately once the amendments have been published on our website.


    What are cookies?

    Cookies are small text files with small pieces of data on your computer, mobile telephone or other devices that are used to identify your computer as you use a computer website.


    How do we use cookies?

    CUATC records website visit from all visitors through cookies or other technology to develop the effectiveness of platform usage and service access via internet in the following cases:

  • To log in to your account in our platform constantly and safely
  • To record the usage in your platform, contents, and patterns in the platform that you already set.
  • To study your usage behavior and website visit to develop and improve the website that matches you most
  • To study the overall usage behavior and website visit and develop the website to be quick easily and effectively used


    • How to Contact CUATC?

    For suggestions or further questions about personal data collection usage and/or disclosure, please contact CUATC via channels as follows:

  • Email : cuatc@chula.ac.th
  • Tel. : (+66) 02-218 3710 (Working hours Monday - Friday 8.00 - 17.00)
  • Address : Chulalongkorn University Academic Testing Center Chamchuri 8 Building, Phaya Thai Road, Pathum Wan District, Bangkok 10330