Personal Data Protection Policy Notice of KASIKORNBANK PUBLIC COMPANY LIMITED
Updated May 2022
KASIKORNBANK PUBLIC COMPANY LIMITED (“KBank”) operates its business in adherence with ethical standards and respect for your privacy. KBank has always placed importance on personal data protection and security to ensure that your personal data obtained by KBank will be used in accordance with the objectives and in compliance with law. KBank has formulated this personal data protection policy (this “Policy”) to inform you, as a data subject, of the objectives and details for collection, use and / or disclosure of personal data, including your legal rights.
This Policy shall apply to you if you are classified as one or several types of the following persons.
KBank may collect your personal data via the following channels :
“Sensitive Personal Data” means personal data which is specifically determined by law. KBank has no intention to collect Sensitive Personal Data from you.
In certain cases, however, KBank may need to collect Sensitive Personal Data from you for providing services or products to you, for example, religion (displayed on a copy of national ID card) or race (displayed on a copy of passport of some countries), biometric data (such as facial recognition data, fingerprint recognition data, electronic signature data which uses technology extracting specific behavior of such signing for identification and authentication of the person who writes such signature), data on criminal record, health data, data on disability, sexual behavior, etc. KBank shall collect, use and / or disclose the Sensitive Personal Data provided that KBank has been given explicit consent by you or permitted by law. This shall be undertaken on a case - by - case basis when KBank is required to collect Sensitive Personal Data from you.
(Unless specifically stated otherwise, personal data and Sensitive Personal Data as earlier mentioned shall hereinafter be collectively referred to as “Personal Data”.)
KBank has no intention to collect, use and / or disclose Personal Data of minors, the incompetent or quasi - incompetent persons, unless KBank obtains consent from the guardian, the appointed guardian the appointed curator or any act which minors may give consent by itself pursuant to law (as the case may be) and / or has any lawful basis. If KBank discovers that the collection, use and / or disclosure of Personal Data of minors, the incompetent or quasi - incompetent persons is undertaken without (i) consent from the guardian, the appointed guardian, the appointed curator or minors who may give consent by itself pursuant to law (as the case may be) and (ii) any lawful basis, KBank shall delete or destroy such Personal Data.
If you provide Personal Data of any other third party who is a Personnel of Juristic Person and / or who has involvement with you to KBank such as shareholders, directors, authorized persons, family members, reference persons, trade partners, guarantors, mortgagers, providers of collateral, beneficiaries, administrator of an estate, emergency contact persons and / or any other person per document of your transaction, etc., please inform those persons of the details under this Policy and request their consent, if necessary, or apply other lawful bases to ensure that KBank can collect, use and / or disclose Personal Data of the aforementioned third party.
KBank will collect, use and / or disclose your Personal Data only as necessary under KBank’s legitimate objectives which include the collection, use and / or disclosure of Personal Data for compliance with the contract in which you are a contract party, for performance of duties as required by law, for legitimate interest, for operations according to your consent and / or for operations under other lawful bases. Objectives for collection, use and / or disclosure of Personal Data under this Policy are as follows.
Some of the following objectives may or may not apply to you. Please consider the objectives in accordance with your relationship with KBank on a case - by - case basis.
KBank shall collect, use and / or disclose your Personal Data based on consent for the following objectives.
KBank may request your consent directly or via other companies within KBank Financial Conglomerate, business partners and / or other juristic persons on a case - by - case basis.
KBank will collect, use and / or disclose your Personal Data based on other lawful bases as necessary under KBank’s legitimate objectives, such as, for compliance with the contract in which you are a contract party or your request, for performance of duties as required by law , for the legitimate interest and / or for operations under other lawful bases for the following objectives :
If KBank needs to collect, use and / or disclose your Personal Data for execution of or compliance with a contract that you have entered into with KBank and / or for KBank’s performance of duties under the law and you, upon request, do not provide such necessary Personal Data to KBank or you have chosen to delete your user account from the application of KBank, KBank may not be able to approve or deliver / provide products and / or services, either partly or wholly, for you and it may impact on KBank’s performance of duties under the law or your relationship with KBank.
Under your consent or criteria permitted by law, KBank may disclose your Personal Data to a third party. Persons or agencies receiving such Personal Data will collect, use and / or disclose your Personal Data within the scope for which you have given consent, or within the scope related to this Policy. In certain cases, you may be under the personal data protection policy of such recipient of your Personal Data. The recipient of your Personal Data may be in Thailand or other countries.
KBank may disclose your Personal Data to persons or agencies based on your relationship and transaction as follows :
In cases where your Personal Data is disclosed to business partners for their marketing purposes such as for sales promotion, public relations or offering of products and / or services by business partners to you, KBank will notify you of the names of business partners for supporting your decision in giving consent. Business partners can rely on the consent that KBank obtains.
KBank may need to send or transfer your Personal Data to other companies within KBank Financial Conglomerate located in other countries, or to other recipients of data, as part of KBank’s normal business operation. For instance, sending or transferring Personal Data for storage on cloud platforms or servers located in other countries, sending or transferring data of cross border fund transfer transaction to a financial institution located in another country via international funds transfer management intermediaries, a trade partner which is a private banker in another country, banks or financial institutions which are corresponding banks or nostro banks in other countries, business partners including those jointly providing products and / or services and Co - branding business partners, online social media service providers, government agencies in other countries and / or a person having connection with your transaction in other countries, etc.
If the destination country has insufficient standards of Personal Data protection, KBank shall ensure that Personal Data will be sent or transferred in accordance with law and shall set standards of Personal Data protection as deemed necessary, and appropriate for and consistent with the confidentiality standards. For instance, an agreement must be entered into with the data recipient in that country to ensure that your Personal Data will be protected under the Personal Data protection standards equivalent to that in Thailand. If the data recipients are other companies within KBank Financial Conglomerate, KBank may decide to conduct binding corporate rules verified and certified by relevant competent authorities and will send or transfer Personal Data to other companies within KBank Financial Conglomerate located in other countries in accordance with said binding corporate rules.
KBank may collect and use cookies and / or any other technologies of similar nature when you use KBank’s website and / or application including conducting transactions, using products and / or services of KBank via digital channels and internet network. The collection of cookies and / or use of any other technologies of similar nature will help KBank to recollect your use and preferences, including analysis of your interest for improvement and development of efficiency of KBank’s website and / or application in order to respond to your demand and use so that you can have positive experiences in using KBank’s website and / or application. You can learn more details from the “Cookies Policy” of KBank at www.kasikornbank.com/en/privacy-policy/Pages/CookiesPolicy.aspx
Moreover, KBank may disclose the data that cannot identify you to data analysis service providers such as Google, both in Thailand and other countries. Google will use technologies and tools for data analysis such as cookies and / or the Software Development Kit (SDK) to monitor and conduct reports of data analysis related to your use of KBank’s website and / or application. You can learn details of Google’s data analysis under the heading “How Google uses data when you use your partner’s sites or apps” at www.google.com/policies/privacy/partners or other URL as determined by Google.
KBank will keep your Personal Data during the period you are KBank’s customer or have a relationship with KBank, or throughout the period required in order to achieve the related objectives of this Policy. Once your relationship with KBank ends, KBank will further keep your Personal Data for a period as necessary according to the statute of limitations or for a period as required or permitted by law, for instance:
KBank will undertake operations through appropriate steps to delete or destroy the Personal Data or make it anonymous when it is no longer necessary or said period ends.
KBank shall apply technical, administrative and physical safeguard measures for safekeeping of your Personal Data in order to maintain confidentiality, accuracy, completeness, and availability of Personal Data to prevent unauthorized or illegitimate access, collection, revision, rectification, use and / or disclosure of Personal Data in accordance with legal requirements.
KBank has put in place appropriate measures to prevent the infringement of Personal Data. KBank has therefore established policies, procedures and criteria for Personal Data protection such as measures to control access to Personal Data and use of secure and proper devices for storing and processing Personal Data, restriction of access to Personal Data, determination of users’right to access Personal Data, right to permit assigned employees to access Personal Data and users’ responsibilities in order to prevent unauthorized access to Personal Data, unauthorized disclosure, unauthorized knowledge or unauthorized copy of Personal Data, or theft of devices used for storing or processing Personal Data. Measures have thus been put in place for tracking back of access to, change in, deletion or transfer of Personal Data, which are consistent with and appropriate for the methods and tools for collection, use or disclosure of Personal Data, including examination for assessing the effectiveness of compliance with policies, procedures and criteria for Personal Data protection.
KBank’s executives, employees, personnel, contractors, representatives, advisors, and recipients of data from KBank shall maintain the confidentiality of Personal Data in accordance with the confidentiality measures determined by KBank.
Your rights under this item are legal rights that you should be aware of. You can exercise your rights as stipulated by law and this Policies currently available or to be amended in the future, including criteria determined by KBank. If you are less than 20 years old, or have limited capacity to perform juristic acts under the law, you may request your father and / or mother, appointed guardian or authorized person to express the intention to exercise these rights on your behalf.
However, the withdrawal of your consent related to and required for the service request may prevent KBank from complying with the contract or providing services to you, or may cause the transaction or any other related activities to be suspended or temporarily discontinued, or may affect your knowledge of products and / or services, for instance, you may not receive the offer of products and / or services, benefits, promotions or other new offers, or may not receive alternative products or services which are more in line with your needs, or may not receive news and recommendations that are beneficial to you, etc. For your own benefit, you should determine and inquire about the potential impacts before deciding to withdraw your consent.
Your aforementioned Personal Data must be Personal Data that you have granted consent to KBank to collect, use and / or disclose or must be Personal Data that KBank needs to collect, use and / or disclose for your use of KBank’s products and / or services in accordance with your intention wherein you are a contract party with KBank or for undertaking operations per your request before using KBank’s products and / or services or must be other Personal Data as determined by competent authorities.
In addition, you are entitled to lodge an objection to the collection, use and / or disclosure of your Personal Data which is undertaken for objectives related to direct marketing or for the purpose of scientific, historical or statistical studies and research.
Exercising the aforementioned rights may be restricted by applicable laws, and, in certain cases, there may be compelling reasons that may cause KBank to deny your request or may prevent KBank from complying with your request such as for in compliance with laws or court orders, for the public benefit, exercising the aforementioned rights may potentially violate other persons’ rights or freedoms, etc. If KBank denies aforementioned request, KBank shall give you the reason(s) for such denial.
You can submit your request to exercise your rights via the following channels:
Download form for exercising your rights here
KBank may consider rectifying, revising or changing this Policy from time to time, as deemed appropriate and permitted by law. In case of rectification or revision of, or change in this Policy, KBank will announce the current policy on KBank’s website at www.kasikornbank.com/en/privacy-policy
If you have any suggestions or would like to inquire about information regarding details of the collection, use and / or disclosure of your Personal Data including exercising your rights under this Policy, you can contact KBank via K PLUS, KBank’s branches or K - Contact Center at tel. 02-8888888
In addition, you can contact the data protection officer by email at email address : DataProtectionOfficer@kasikornbank.com Address : No. 1, Soi Rat Burana 27/1, Rat Burana Road, Rat Burana Sub-district, Rat Burana District, Bangkok 10140