The SURF 8th International Workshop (SURF 2023) Participants Personal Data Protection Policy

SURF2023 organizing committee (hereinafter we) takes the protection of your personal information very seriously.  We ensure that your personal data will be protected according to the Personal Data Protection Act enacted by the Royal Government of Thailand.  Therefore, we have established this personal data protection policy to notify you, a participant of SURF2023.  You are entitled to know the details of how we process your personal data such as collect, use, or disclose of your personal data, to know your rights to access your personal data and how to contact us.  The following sections contain the information.

1. Collection and Processing of Personal Data

In general, we collect your personal information by asking for such information from you directly and indirectly by various methods such as online application forms, paper application forms and acknowledgment letters sent from your department/agency/organization etc.

The detail of the types of personal data is as follows.

1. Identity data e.g. title, first name, last name, type of participant and a photo

2. Contact data e.g. home address, personal phone number, work phone number, email address

3. Data obtained during your participation of SURF2023, such as photos, videos during activities, etc.

4. Data of your job, such as job position, departments, other affiliations, etc.

5. Data regarding opinions, expectations and satisfaction of participating in SURF2023.

6. Other personal data, such as preference of food (in case of catering for meals and breaks), the make of your vehicle and registration number (in case of reserving parking spaces for participants), etc.

In some cases, we require a copy of your passport or national identity card to verify your identity.  Those identification cards might include sensitive personal data such as religion, philosophical beliefs and health data e.g. blood type.

Generally, we do not intend to collect and use these sensitive personal data for any specific purpose. If you have given us copies of your passport or national identity card contain such data, please direct us to exclude them and sign with your signature indicating that you entrust us to protect them with mutual knowledge from both parties.

2. Purpose of Collecting and Usage of Personal Data

During the SURF2023, we may process your personal data for various purposes based on the following legal bases as follows:

3. Duration of the Storage of Personal Data

We only store your personal data for a limited duration necessary for fulfilling purposes stated in section 2. In general, after the completion of SURF2023, we keep the data in the cloud service platforms for an additional 2 years.

4. Personal Data Disclosure

We shall not disclose your personal data without your consent and shall disclose it solely for the above-mentioned purposes.  We use some cloud service platforms such as Google forms and Microsoft forms as data collection tools for registration and evaluation. After the completion of SURF2023, we keep the data in the cloud service platforms for an additional 2 years.

5. Rights of Data Subject

          You, the data subject, can exercise your rights of your personal data by following the guidelines stated in the Personal Data Protection Act, B.E. 2562 (2019) enacted by the Royal Thai Government.  You can contact us regarding this matter by writing our data protection officer (DPO) with the address in section 8 of this document.  You are entitled to request any actions regarding your personal data as per the following:

5.1 Right to withdraw consent; however, any consent which was obtained earlier shall not be affected.

5.2 Right to access; to request access to and obtain a copy of the Personal Data related, including to request the disclosure of the acquisition of personal data obtained without your consent.

5.3 Right to data portability; to obtain and reuse your personal data for your own purposes across different services.

5.4 Right to object

5.5 Right to erasure

5.6 Right to restriction of processing;

5.7 Right to rectification

6. Direction of Personal Data Protection

Our personal data protection officers assure that your personal data will be kept securely and appropriately.  We restrict the access of these data to prevent loss of data, modification and unauthorized use of the data.  This protocol is identical to information security policy of our country.

Furthermore, we promote and encourage employees to learn and recognize the duties and accountabilities in the collection, storage, usage, and disclosure of personal data. All employees are required to follow this policy and all guidelines regarding personal data protection in order for us to remain in compliance with the Personal Data Protection Act accurately and effectively.

7. Review and Changes of Policy

          We may review this policy to ensure that it remains in adherence to laws, significant changes, and suggestions and opinions from other organizations.  We shall announce on our website and review amended policies thoroughly before implementing all the changes.

8. Contact Information

If you have questions regarding our personal data protection policy, please contact our local organizing committees via the following address.

The SURF 8th International Workshop

Mahidol University Kanchanaburi Campus

No. 199, Moo 9, Lumsum Sub-District,

Saiyok District, Kanchanaburi 71150

Thailand

E-mail: surfworkshop.2023@gmail.com