Privacy Notice for Card Exchange
to Enter the Building or Premises

Back to Privacy Policy

        Muang Thai Life Assurance Public Company Limited and its subsidiaries including companies or organizations that control, are controlled or are under control by the Company which may mostly have the same shareholders or directors (hereinafter referred to as “the Company”) highly respect your privacy and are aware of the responsibilities in relation to collection, use, and disclosure of personal data of visitors and individuals requesting access to the Company’s buildings or operational premises (hereinafter referred to as "you") and/or delivery, transfer of your personal data to others.
         The Company greatly values your trust and confidence in the Company and is committed to processing and protecting your personal data accurately and appropriately. Therefore, it is also very important to the Company that you understand about methods and procedures for the collecting, use, processing and disclosure of personal data. You must carefully read and understand the Privacy Notice Card Exchange to Enter the Building or Premises (“Notice”) as follows.

1. Personal Data Collected

         Types of personal data that the Company collects, uses, processes and/or discloses depends on purpose of your consent. In this regard, the Company aims to collect only necessary personal data for the purposes specified in this Notice. If you do not provide the personal data necessary for the Company's operations, the Company may be unable to fulfill the purposes for which you provided your information, or you may not receive certain rights from the Company. Examples of personal data that the Company may collect include:

         a) Information obtained from identification documents, such as personal data appearing on a driver's license, employee identification card, or other photo ID permits capable of verifying your identity.
         b) Other information obtained from registration forms, such as first and last name, telephone number collected from the card exchange form, the department being visited, and the date and time of entry and exit.

         The Company does not intend to process any sensitive personal data that may appear on identity documents. The Company may take action on its own by redacting or obscuring your sensitive personal data without the need to notify you. Alternatively, the Company may request that you redact or obscure your own sensitive personal data yourself.

2. Methods of Collecting Your Personal Data

         The Company will collect your personal data directly from you, such as information you provide in registration forms, details contained in documents submitted to the Company, or through inquiries and communications with you, both verbal and written. If you do not provide the requested personal data, the Company may be unable to process the card exchange to grant you access to the building.

3. Purposes of Processing Your Personal Data

         The Company uses your personal data to fulfill the purposes for which you provided the data, to manage its business operations, and to enhance the overall experience between you and the Company. The Company processes your personal data for various purposes under the following legal bases:

4. Methods of Personal Data Protection

         The personal data collected by the Company will be processed fairly and accurately in accordance with the Personal Data Protection Act. The Company has implemented physical and electronic security measures to ensure compliance with the applicable regulatory standards for protecting your personal data. You can find more details and information on how to protect your personal data from the Company's Privacy Policy at https://www.muangthai.co.th/en/privacy-policy.

5. Retention Period of Personal Data

         The Company may collect and use your information for the above purposes in accordance with the law for a period not exceeding 90 days from the date of entering the building or premises. Upon the expiration of this period, the Company will delete or anonymize the personal data.

6. Disclosure and Transfer of Your Personal Data

         The Company has Personal Data security policy and procedures, and restrict access to your Personal Data whereby only those who need to use your Personal Data are allowed to access in order to comply with the purposes for which the data is collected. However, your Personal Data may be shared to the following persons:

• The Company will disclose your personal data to external parties who are its business partners, such as external parties providing information technology services or providing security services that assist in the Company’s business operations . If the Company discloses information to external service providers, the Company will use strict control measures to ensure appropriate protection of the data.
• The Company will disclose your information if required to comply with the law. For example, when the law, government agencies, law enforcement agencies, committees established by law, or regulatory authorities require the Company to disclose such information. For instance, the Office of Insurance Commission (OIC), the Anti-Money Laundering Office (AMLO), the Stock Exchange of Thailand (SET), the Thailand Securities Depository (TSD), clearing houses, courts, the Royal Thai Police, the Department of Special Investigation (DSI), the Legal Execution Department, the Revenue Department, the Department of Business Development, and the Land Office, or the Company may disclose information as part of legal claims. The Company may also disclose your information for important public interests when such disclosure is necessary and proportional. For example, the Company may provide your information to tax authorities.
• Any other persons or entities as necessary to achieve the purposes outlined in this Notice.
  
  

         Your personal data may be transferred, transmitted, collected or processed by the Company or delivered to entity or others department as detailed above which may located inside/outside Thailand. However, the Company shall formulate standards of agreements and/or business contracts with agencies, organizations that will receive such personal data based on acceptable personal data protection standards and applicable laws in order to ensure security of your personal data.

7. Your Rights Based on Personal Data Protection Law

         You have the right, as a data subject, to access data relating to you, to be informed about the existence and the extent of data processing, to rectify incorrect personal data (whichever the case may be), to make use of your personal data’s portability and to oppose further processing on serious and legitimate grounds. You can learn more about your rights regarding personal data protection under the MTL’s Privacy Policy at https://www.muangthai.co.th/en/privacy-policy.
         Additionally, you can consult and find information on personal data protection or the process for filing a complaint from the Office of the Personal Data Protection Commission as outlined in the Personal Data Protection Act B.E. 2562 (2019).

8. Amendments to the Privacy Policy

         The Company reserves the right to amend this Notice at any time as it deems appropriate. In the event of any amendments to this Notice, the Company will publish the updated information on the website www.muangthai.co.th/en/privacy-policy or through other channels deemed appropriate by the Company. This notice was last updated on 17 June 2026.