TELCO CONNECTINGPrivacy Policy
How TELCO CONNECTING CO., LTD. collects, uses, discloses and protects your personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).
This policy explains how TELCO CONNECTING CO., LTD. collects, uses, discloses and protects your personal data when you visit www.telcoconnected.com or contact us by email, phone or LINE, under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). It does not cover the Company's previous website, which still runs separately.
This website only shows information. It has no forms that send data, no sign-in, no chat, and no analytics or advertising tools.
1. Data controller
TELCO CONNECTING CO., LTD. ("the Company", "we"), registration no. 0205564024492, head office at 99/22 Moo 2, Ban Bueng Sub-district, Ban Bueng District, Chonburi 20170, Thailand.
2. Personal data we collect
| Category | Data | Source |
|---|---|---|
| Technical data | The hosting system's logs, which may hold your IP address, browser and device type, pages requested, referring page, and date and time of access | Collected automatically when you open a page |
| Direct contact | What you give us when you contact us by email, phone or LINE, such as your name, organization, contact details and request | You |
| Job application | The email you send to our HR team, including your CV and what you write or attach | You |
| Requests to exercise your rights | What you ask for, your contact details, and the information needed to verify your identity | You |
The words you type in the product search box stay in your browser and are not sent to the server. The search term appears in the last part of the page address (after the # sign), so if you share that link, the person who receives it will see the term. If a link has a search term before the # sign, that term may appear in the hosting system's logs.
We do not want sensitive personal data under Section 26 of the PDPA (such as religion, health data, criminal records or biometric data), nor copies of national ID cards. Please do not send them in email or in your CV. If we receive such data by mistake, we will delete or redact it.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Running the website, keeping it secure and investigating system problems | Legitimate interests (Section 24(5)) |
| Answering inquiries, preparing quotations and contacting you as requested | Steps taken at your request before entering into a contract (Section 24(3)) or, where you contact us on behalf of an organization, legitimate interests (Section 24(5)) |
| Providing services and performing contracts with customers | Contract (Section 24(3)) / legitimate interests for contact persons of corporate customers (Section 24(5)) |
| Assessing job applications and contacting candidates | Pre-contract steps (Section 24(3)) |
| Keeping an application for other roles, when you ask for this in your email | Consent (Section 19), withdrawable at any time |
| Answering rights requests and complying with accounting, tax and regulatory obligations | Legal obligation (Section 24(6)) |
| Establishing, exercising or defending legal claims | Legitimate interests (Section 24(5)) |
4. Who receives your data
We disclose data only as needed to:
- Company staff who need it for their role;
- Microsoft, which provides services to us: Microsoft Azure (website hosting, system logs and backups) and Microsoft 365 (company email). Microsoft may use sub-processors under Microsoft's terms;
- the manufacturer of the brand concerned, or that brand's distributor or reseller, when needed for what you ask, such as a quotation, order, delivery, warranty claim or project registration with the manufacturer. We share only what is needed, usually your organization's name, the contact person's name and business contact details, and the products and project details concerned;
- professional advisers such as auditors and lawyers;
- government authorities or courts where required by law.
This website's name uses an outside DNS provider, which only answers domain name lookups and does not host this website. If you choose to contact us on LINE, your messages pass through the LINE provider's service under that provider's own terms. We do not sell personal data.
5. Storage and international transfers
This website is hosted on Microsoft Azure in a data center in Singapore, which is outside Thailand, so the hosting system's logs are stored there. This website has no database. Email you send us is held in the Company's Microsoft 365 system. Data may be transferred to or accessed from other countries, including the United States, where Microsoft or its sub-processors run data centers or provide technical support. We use these services under Microsoft's contract and terms. Some of the manufacturers, distributors or resellers in Section 4 may store or access data outside Thailand. You can ask for details through the contact in Section 10.
6. Retention
| Data | Period |
|---|---|
| Hosting system logs | As long as needed to run and secure the system, then deleted according to the system's settings. Copies may remain in the hosting system's automatic backups for a further period |
| Direct contacts from people who do not become customers | 2 years from the last contact |
| Customer data and contract documents | Contract term plus 10 years after it ends |
| Unsuccessful job applicants | 1 year, or until you ask us to delete it. If you asked us to keep your application for other roles: 12 months from the date of your application, or until you withdraw consent |
| Requests to exercise your rights and our replies | 3 years after we complete the request |
At the end of the period we delete, destroy or anonymize the data.
7. Your rights
Under the PDPA you have the right to: access and obtain a copy of your data; receive or ask us to transfer your data; object to processing; have your data deleted, destroyed or anonymized; restrict its use; have it corrected and kept up to date; withdraw consent at any time, without affecting processing carried out before withdrawal; and complain to the Office of the Personal Data Protection Committee (PDPC).
Send requests through the contact in Section 10. We check that a request comes from you or someone you have authorized, and we will respond within 30 days of receiving it. Some rights may be limited by law; if so, we will tell you why.
8. Security
The website uses encrypted connections (HTTPS) and runs with no database and no visitor sign-in. If a personal data breach occurs, we will notify the PDPC and you as required by law.
9. Minors
This website is intended for business customers and adult job applicants. We do not knowingly collect data from minors.
10. Contact us / Data Protection Officer (DPO)
Data Protection Officer · Email: dpo@telco-connecting.com (please contact the DPO by email) · Address: TELCO CONNECTING CO., LTD., 99/22 Moo 2, Ban Bueng Sub-district, Ban Bueng District, Chonburi 20170, Thailand
11. Changes to this policy
If we intend to use personal data in a way not described here, for example by opening forms, chat or analytics tools, we will update this policy first and show the effective date at the top.