Sunday Insurance (Thailand) PCL. Privacy Policy

Sunday Insurance (Thailand) Public Company Limited (the “Company” or “our” or “us”) has established this Privacy Policy to acknowledge our practice and management of your personal data which the Company collects, uses or discloses to be in accordance with Personal Data Protection Act B.E.2562 (“PDPA”) including any regulations enforced on personal data protection. The detail of this Privacy Policy as follow;

1. Definition

   “Personal data” means that any information relating to an identified or identifiable natural person, directly or indirectly, excluding the information of deceased natural person. “Sensitive Data” means Personal Data which is truly personal, sensitive and risk for discrimination and shall be treated and conducted carefully. Sensitive Data such as race, ethnicity, political opinion, religion, criminal record, health history, labor union data, etc. (Both Personal data and Sensitive data will be herein collectively called “personal data”.)

2. Collected Personal Data and Source of Data

   The Company shall collect your personal data including, but not limited to;

   1. Personal Information which is name, surname, date of birth, status, sex, address, ID card no., passport no., occupation, position, working experience.

   2. Contact Information which is e-mail, phone no, address, social media contact e.g. ID Line.

   3. Financial Information which is bank account no., credit card, debit card, income, privilege, benefit, receive/payment, financial history, tax.

   4. Sensitive Information which is race, religion, disability, health history, medical history, accident, drug record, medical certificate, treatment record, prescription record, medical expense, medical question, police daily report, police opinion, criminal record, offence record, photo/video clip of would or accident, court order/judgement.

   5. Insurance Transaction Information which is information given in insurance application, purchase or service history, claim history, complaint, potential to purchase insurance product information.

   6. Contact or Visiting Information which is website and system use/access data of the company, Affiliate Company or application developed by the Company, cookies, social media use data, service record, satisfaction assessment, statistic or analysis data, voice record, voice mail, video record (and voice record) through CCTV.

   7. Other Information which are car plate, chassis no, interview and research data. In this regard, The Company has collected personal data directly from you or from performing our business, all sale channels, provide or receive service by the Company which the activities as follows;

      1. Insurance application, claim, use any services or perform a transaction with the Company

      2. Voluntary doing a survey or attending any activities, e-mail responding, or communication through any channels between you and the Company

      3. Access to the Company’s website through your Browser’s Cookies

      4. From insurance agent or broker

      5. From hospital, clinic, garage, dealer or service provider relate to non-life insurance service

      6. From government agency or regulators such as Office of Insurance Commission, Anti Money Laundering Office, Revenue department, etc.

      7. From other Insurance company

      8. Others source which the Company receiving legally

   Providing personal data of others, such as Beneficiary, Incompetent person, employees, contractor etc. You are required to inform such person concerning rights specified on this policy by yourself and/or receive their consent prior to providing their personal data to Company. However, the Company would like to inform you that the incomplete to of providing all required data by Company, it also affects an ability of Company to consider making any transaction with you.

3. Objective of collection, usage or disclosure personal data

   The Company shall collect, use and disclose your personal data for the following objectives;

   1. To consider underwriting, claim payment, paying benefit according to insurance contract and providing service as Insurer to develop our product and service.

   2. To collect premium and debt (if any), to check premium payment or expense, to pay claim and checking claim payment

   3. To perform under insurance contract, co-insurance contract, reinsurance contract, Sub-reinsurance contract

   4. To provide risk survey, claim assessment and/or loss adjuster

   5. To provide Insurance contract renewal notice, service and take care customer and quality control

   6. To perform legal proceeding, in case of liable to third-party or subrogation

   7. To Compile information for statistical, analytics/research to enhance products and services, premium calculation matching with risk, investigate and prevent of fraudulent and/or violation of law

   8. To comply with relevant laws and regulations or the order of regulator, government sector or any authorities

   9. To communicate, receive/inform information relate to insurance service or any change.

   10. To provide sale promotion, privilege and/or for cross selling/up selling or to develop the Company’s service

   11. To assess the behavior of using the Company’s website, application, social media to analyze for creating, improvement and development.

   12. Processing for other objectives within the scope of law

   However, the Company shall collect, use and disclose your personal data under the above objectives within the following conditions;

   • Explicit consent given by you

   • Necessary for the performance of a contract to which you is a party, or in order to take steps at the request of you prior to entering into a contract (Contractual basis)

   • For preventing or suppressing a danger to a Person’s life, body or health

   • Necessary for the performance of a task carried out in the public interest by the Company, or Necessary for the exercising of official authority vested in the Company

   • Necessary for legal benefit of the Company or any other persons or juristic persons which it is not over your expectation with reasonable (Legitimate Interest)

   • Necessary to comply with law and regulation which the Company shall comply (Legal Obligation)

   • Other legally basis

4. Disclosure of Personal Data

   The Company may need to disclose your personal data to other persons for the purpose of performing under insurance contract or providing service as follow;

   1. Office of Insurance Commission for the benefit of governing insurance business

   2. Any authorities governing Company, for instance, Anti-Money Laundering Office, Revenue Department, etc.

   3. Thai General Insurance Association and/or assigned division for the purpose of analyzing the statistic and premium calculation;

   4. Reinsurance company and/or Co-insurance company

   5. Financial institute or Financial service regarding receipt and payment

   6. Authorized person that Company legally authorize to provide service on behalf of the Company in regard of underwriting, loss survey, compensation, compliance, auditing any activities relating to insurance contract or business operation of Company as necessary.

   7. Authorized agent or broker for the purpose of providing service to insured or beneficiary

   8. Any third party which you provided us the explicit consent or any person with you can expect relate to insurance contract, or disclose for doing a transaction and/or use service as you requested other than above mentioned objectives.

   The Company will transfer, transmit and/or deliver your personal data across countries only in case of the destination country have data security measure equally as stipulated by law and within the above objectives for collection, usage or disclosure.

5. Personal Data Protection

   The Company will securely keep your personal data by implementing technical measures and organizational measures to ensure appropriate security in the personal data processing and preventing personal data breach. The company, therefore, aware of data security as well as compliance with data security standard according to the law and regulation of government agency and regulators.

   Moreover, the Company has implemented security measurement to protect your privacy by restrict the right of access to personal data only for necessary person who need to process such personal data. Such person shall strictly comply with the Company’s security measurement and data confidentiality.

6. Retention Period of Personal Data

   The Company will retain your personal data as long as it is necessary for performing the above objectives of processing your personal data which the Company will retain for 10 years from the date of termination the relationship with you or last contact. The Company may retain your personal data longer than such period under the permission of law.  The Company shall collect your personal data in an appropriate form according to the type of data. However, the Company may necessary retain your personal data after the expiration of prescription such as during the litigation process, etc.

   The Company shall conduct an appropriate process to delete or destroy or anonymize your personal data after end of period of the collection.

7. Right of Data Subject

   You have rights as specified on Personal Data Protection Act B.E. 2562 as follows;

   1. Right of Access: To access your Personal Data, or obtain a copy of your Personal Data

   2. Right to Rectification: To request that your Personal Data be updated, corrected, completed, and not cause any misleading

   3. Right to Data Portability: To receive the personal data / request to transfer to the third party

   4. Right to Object: To object the collection and processing of Personal Data, withdraw the consent which has already been given, whenever needed under laws and regulations

   5. Right to Erasure: To request that your Personal Data be deleted, destroyed or de-identified

   6. Right to Suspension: To request the suspension of the processing of your Personal Data

   7. Right to Lodge Complaint: To lodge complaint to the competent personal data protection authority

   You can contact to DPO to request for exercising your right on personal data (contact information as shown below). The Company will consider and inform the result of performing your request within 30 days after receiving your request. However, the Company may deny or not be able to carry out pursuant to your requests, especially, to delete, destroy or anonymize your personal data if there is necessary for complying with laws or court orders. To delete, destroy or anonymize your personal data or withdrawal your consent can be done only under law stipulated, however, to exercise such right may affect us on performing under contract or providing service under insurance contract. Withdrawal of consent shall not affect to the collection, usage or disclosure of personal data under your prior consent provided.

8. Contact Information

   If you have any suggestions or inquiries regarding collection, usage and/or disclosure of your personal data as well as a request to exercise your rights under this Privacy Policy, you may contact us via the following channel:

   Sunday Insurance (Thailand) Public Company Limited 100/24 Sathorn Nakorn Tower 16th Floor A, North Sathorn Road, Silom Subdistrict, Bangrak District, Bangkok 10500 Thailand Telephone: 02 022 1111 E-mail: DPO.th@sundayinsurance.co.th

9. Review and Revision of Privacy Policy

   The company shall regularly consider to review this Privacy Policy to align with our practice and to comply with PDPA and other relate regulation. The Company reserves the right to amend this Privacy Policy either in part or in all at any time without prior notice. The revised Privacy Policy will be posted on our website which you can find the revision at www.sundayinsurance.co.th/en/privacy