1 Purpose

The purpose of this Privacy Policy is to protect the rights and interests of individuals while ensuring the proper operation of business by setting out the basic matters regarding the handling of personal information held by the Tokyo Metropolitan Small and Medium Enterprise Support Center, Thailand Branch Office (hereinafter, "We", "Our", or "Us") in view of the development of an advanced information and communications society.

2 Definitions

In this Privacy Policy, the following words shall have the respective meanings set out below:

1. (1)"Personal Data" shall mean information relating to a living individual who can be identified by name, date of birth or other description contained in the information (including persons who can be matched with other information and thereby be able to identify specific individuals).
2. (2)"Laws and Regulations" shall mean laws or regulations relating to the handling of personal data, such as the Personal Data Protection Act B.E. 2562 (2019) of Thailand.
3. (3)"Held Personal Data" shall mean personal information created or acquired by Our employees in the course of their duties and held by Us for organisational use by said employees; provided, however, that items recorded as documents, drawings, photographs, films, electromagnetic records, etc. (hereinafter, "Documents, Etc.") managed by Us.
4. (4)"Subject" refers to a specific individual who can be identified by personal information.

3 Our Responsibilities

In order to achieve the objectives of this Privacy Policy, We will take the necessary measures to protect Personal Data and shall do Our utmost to ensure that Personal Data is not unnecessarily disclosed to the public.

4 Collection of Personal Data

We may collect, directly or indirectly, names, telephone numbers, email addresses, postal addresses, company names, job titles, instant messenger IDs and other Personal Data from the following sources:

1. (1)You, Your agents, or other relevant persons.
2. (2)Our partners, business partners or subcontractors.
3. (3)Government agencies and other reliable sources.

5 Purpose of Use

We will collect and use Personal Data for the following purposes of use:

1. (1)Where it is necessary for the performance of an agreement to which You are a party or where it is necessary to carry out procedures at Your request prior to the conclusion of the agreement (including information and registration procedures for seminars, matching events, etc., matching support, consultation support, event co-hosting, and performance reports).
2. (2)Information and invitations to Our seminars and matching events or those of organisations related to Us as well as distribution of newsletters, etc.
3. (3)Publication of Our company news, advertisements, etc. on websites, social media and other means of information dissemination
4. (4)Our internal management or legitimate interests to the extent that Your basic rights, interests, etc. are not unjustifiably infringed.
5. (5)Our security or safety.
6. (6)Compliance with Our legal obligations.

If You are unable to provide certain information required for the above purposes of use, You may not be able to use all or part of the services We provide.

6 Sensitive Data

Notwithstanding the preceding item, We do not, as a rule, collect Personal Data on race, origin, political opinions, beliefs, creed, ideology, criminal records, health, disability, sexual orientation, labor union information, genetics, biometric information, or Personal Data that might cause social discrimination (hereinafter, "Sensitive Data"); Where required by Laws and Regulations or where such Sensitive Data is necessary to achieve the purpose of use of the business of handling the Sensitive Data, consent will be obtained from You before collection thereof.

7 Period of Holding

We will hold Held Personal Data for as long as is necessary for the purposes of use thereof. We will promptly erase Held Personal Data that is no longer required to be held or destroy the Documents, Etc. that contain it. In general, Held Personal Data will be held for up to 10 years, except as specifically provided for in Laws and Regulations.

8 Measures Taken in Connection with Outsourcing

If We intend to outsource the handling of Personal Data to a third party, We will take the necessary measures to protect said Personal Data by, for example, providing the necessary supervision.

9 Disclosure and Transfer of Personal Data

We will not disclose Held Personal Data without legal basis; provided, however, that We may disclose or transfer Held Personal Data to the following persons for the purposes of use set out in Item 5.

1. (1)The Tokyo Metropolitan Small and Medium Enterprise Support Center.
2. (2)Our partners, business partners or subcontractors.
3. (3)Experts and advisers (auditors, lawyers, etc.).
4. (4)Governmental organisations.

If it is necessary for Us to disclose or transfer Held Personal Data to a third party, We will take the necessary measures to prevent leakage, loss or damage of Personal Data and to otherwise properly manage Personal Data.

10 Your Rights Relating to Personal Data

You shall have the following rights with regard to Your Held Personal Data (hereinafter, "Your Rights"):

1. (1)Right of access: the right to access Your own Personal Data held by Us.
2. (2)Right to correction: the right to request the correction of Personal Data.
3. (3)Right of deletion: the right to request the deletion of Personal Data.
4. (4)Right of restriction: the right to restrict the use of Personal Data in certain cases.
5. (5)Right to objection: the right to object to Our processing of Held Personal Data about Yourself.
6. (6)Right to data portability: the right to request that a copy of the Held Personal Data be provided in electronic form and the right to request that such Held Personal Data be transmitted to third parties.
7. (7)Right of withdrawal: the right to withdraw any consent You provided.

11 Point of Contact of Enquiries

Any enquiries from You about the handling of Your Personal Data or the exercise by You of Your rights to do so can be received at the following points of contact:

12 Improvement

We may review the operational status of the handling of Personal Data from time to time and revise this Privacy Policy as necessary.