Privacy Policy

Issue Date : 8 December 2023

Privacy Notice of Data for Prospective Students

Mahidol University International College

Mahidol University International College (hereafter referred to as “MUIC”) places a high priority on protection of your personal data. To assure you that MUIC will protect and treat your personal data in compliance with the law on personal data protection, MUIC issued the privacy notice of data for IC APP applicant for your acknowledgement and understanding of personal data collection, use and disclosure (hereafter collectively referred to as “processing”) and hereby informs you of your rights on personal data and our contact channels.

1.   Processed personal data

MUIC collects your personal data by requesting or asking these data directly from you through IC APP systems, we may collect your general data such as:

1)          Identity data, such as name, surname, Staff ID

2)          Contact data, such as e-mail

3)          Using IC APP data, such as shop’s name, transactions made through application such as buying food,  remaining balance

4)          Information about opinions, suggestions, including records of communications between you and the MUIC (if any).

2.   Purposes of data collection

MUIC collects your personal data to serve different purposes in accordance with lawful bases, as follows:

3.   Personal data retention period

MUIC will retain your personal data for as long as is necessary for the purposes for collection, use and disclosure personal data specified in the above purposes. The criteria used to determine the retention period include the length of time we still have a relationship with you in some capacity, such as you still using the IC APP service, etc. In general, we will collect your personal data for the period of 1 year from the end of that tax year for the benefit of checking data and for statistical and research analysis to improve the quality of IC APP. After the said period, MUIC will erase your personal data or anonymize the personal data to prevent identification of individuals.

4.   Personal data disclosure to other agencies or organizations

Sometimes, MUIC may use some types of Cloud Service Platform, such as AWS, Google Cloud, as a tool for creating applications. MUIC does not forward personal data of the applicant to such service providers for processing in any way.  MUIC will retain your personal data in Cloud Service Platform for the period of 1 year from the end of that tax year.

5.   Your rights as the data subject

As the data subject, you are entitled to the rights prescribed in the Personal Data Protection Act B.E. 2562 (2019). You may submit a request to exercise your rights through the channels stated in Item 8. Your rights can be detailed as follows:

5.1       Right to withdraw consent

In case MUIC received your consent, you are entitled to withdraw the consent for personal data processing which you previously gave to MUIC, except the consent withdrawal is limited by law or the contract beneficial to you. The consent withdrawal will not affect the personal data processing for which you already lawfully gave the consent.

5.2       Right to access

You are entitled to access to your personal data under MUIC’s responsibility and the request for its copy, including request to MUIC to disclose the acquisition of the said data for which you did not give the consent to MUIC.

5.3       Data portability right

You are entitled to request MUIC to transfer your personal data provided by you, to other agencies or organizations as prescribed by law.

5.4       Right to object

You are entitled to object the data processing related to you, in case of collection, use or disclosure of personal data related to you as prescribed by law.

5.5       Erasure right

You are entitled to demand MUIC to erase your personal data as prescribed by law. However, MUIC may store your personal data in the electronic system, and some electronic systems may be unable to erase the data. In such case, we will destroy or anonymize the said data to prevent identification of your identity.

5.6       Right to restrict processing

You are entitled to demand MUIC to refrain from processing of your data as prescribed by law, for example

a.           During our inspection following your request to correct your personal data to be accurate, complete and up-to-date.

b.          Your personal data was unlawfully collected, used or disclosed.

c.           When your personal data is not necessary to be stored in accordance with the purposes informed by MUIC during the data collection, but you want MUIC to further store such data to support your exercise of rights.

d.          During the time we prove our legitimate interest regarding collection, use or disclosure of your personal data or check the necessity regarding collection, use or disclosure of your personal data for public benefits, as a result of your exercise of right to object the collection, use or disclosure of your personal data.

5.7       Rectification right

In case you deem that the data kept by MUIC is inaccurate or you changed your personal data, you are entitled to request MUIC to rectify your personal data to make the said personal data accurate, up-to-date, complete and not lead to any misunderstanding.

According to the prescribed law, MUIC may reject the above-mentioned rights of the personal data owner or his/her authorized representative, if not contradicting the law.

6.   Personal data security

MUIC properly implements the security measures for your personal data, including the access right to prevent the data loss or unauthorized access, deletion, disposal, use, change, rectification or disclosure of personal data, in compliance with the information security policy of MUIC.

In addition, Mahidol University established and notified the personal data protection policy throughout the organization together with the best practices for security of personal data collection, use or disclosure and maintenance of personal data confidentiality, integrity and availability. In this regard, Mahidol University will review the said policy and this notice in proper time.

7.   Change of this notice

MUIC may revise this privacy notice of data from time to time. Upon such revision, MUIC will notify you via IC APP, and or via e-mail. If your consent is needed, MUIC will ask for your additional consent.

8.   Contact channels

In case of any inquiry or question on additional details regarding protection of your personal data, collection, use or disclosure of your personal data, your exercise of rights or other inquiries, please contact us via the following channels;

Mahidol University International College

   999 Phutthamonthon 4 Road, Salaya Sub-district, Phutthamonthon District,

Nakhon Pathom 73170

Telephone: 02-700-5000

Or you may coordinate with the data protection officer (DPO) of Mahidol University via e-mail: privacy@mahidol.ac.th