1. Principles and Reasons
Eastern Star Real Estate Public Co., Ltd. recognizes the importance of the Personal Data of customers, partners, employees and related parties provided to the Company with trust. The Company will use appropriate methods to manage, protect and process such Personal Data as well as store, use, disclose or process Personal Data for various purposes, including to contact, procure products, provide services, answer questions or complaints, provide information, send newsletters about products and services as well as promotions provided by the Company or third parties selected by the Company, and operate the Company’s business.
2.2 To inform employees, customers, partners and related persons about their roles and responsibilities.
2.3 To process transactions according to the user's wishes, e.g., in case the user opts to receive newsletters and promotions. The Company will store and use only basic information such as first-last name, email address, telephone number for use in replies or for online booking. The Company will retain and use data which is necessary for issuing important reservation documents.
2.4 To revise and improve website performance, marketing planning, usage data analysis and service evaluation as well as improve the Company's products and services.
2.5 To inform you of information related to the Company's products and services, including benefits and promotions related to such products and services.
2.6 The Company will not use or disclose Personal Data of the user unless it is used or disclosed as necessary for the purposes stated above or with the consent of the user or the Company is acting in compliance with court orders or legal obligations, etc.
Personal Data means data about a person which makes it possible to identify that person, whether directly or indirectly, in accordance with the Personal Data Protection Law.
User means the owner of Personal Data, who is a citizen who uses electronic transactions directly through the Company's website or uses any other services of the Company by electronic means.
Company means Eastern Star Real Estate Public Company Limited.
Website means the media for presenting information belonging to Eastern Star Real Estate Public Co., Ltd. on a computer. This includes a collection of multiple web pages were created as a marketing channel and to increase communication channels with customers.
Mobile Application means the program developed for use with mobile devices such as mobile phones and tablets. The program will help meet the needs of users and increase communication channels with customers.
Cookies means data sent from the website to the computer of a visitor while the visitor is visiting the website.
4. Personal Data Collection
4.1 For customers who visit home/condo projects and have filled out information for the Company through channels such as forms or electronic transaction services to carry out various activities such as answer satisfaction inquiries, reserve rights, reserve houses, create a contract or other purposes, the Company will only collect the data willingly provided by the user such as names and addresses, phone numbers, email addresses and other data necessary for communication with the customer for the purpose of making reservations, creating contracts, transferring ownership, sending newsletters about new projects or take actions as specified by the customer.
4.2 The Company collects employee information through the personnel recruitment process by HR Department.
4.3 The Company collects the information of all users through the Company's website and mobile application where your Personal Data is stored. The purpose is to provide services through the Internet, such as receiving down payment for houses/condos, registration to purchase a house/condo or to request to receive benefit from the Company. The data collected by the Company include user names, email addresses, telephone numbers and addresses, etc.
- IP address.
- Web Browser used to access.
- Visited web pages.
- Websites that reference the Company's website, etc.
The details of the Cookies Policy are displayed on the Company's website.
4.4 The Company only collects and stores Personal Data with the aim of using it for the activities of the Company's website system or business in order to carry out the Company’s operations in compliance with the law. The Personal Data, including the user’s identity and behavioral data, is used for the purpose of managing participation in competitions, promotions, improving the website system, linking work systems, designing and developing the Company's products to access the target groups, sending newsletters on various occasions about projects or services on various occasions, and successfully processing user transactions in the use of the website system.
5. Personal Data Security Maintenance Period
The Company will collect only the necessary Personal Data and for as long as necessary according to the statute of limitation for claims/lawsuits, as well as to fight lawsuits based on the rights of the contract.
6. Personal Data Security
7. Data Confidentiality Measures
The Company has guidelines for maintaining data security in both technology and work processes to ensure that the Personal Data of employees, customers and partners is safe by using various protective measures as follows:
7.1 The personnel recruitment process by the HR Department only stores the data of all employees in the program or application specified by the Company, providing protective and security measures and prevent access to employee data by unrelated persons and prohibiting them from disclosing, copying, modifying or taking any action related to the employee Personal Data without the consent of the Data Subject.
7.2 The process of selling, renting, and providing services to salespeople or sales representatives stores customer's Personal Data only into programs or applications designated by the Company. Documents that must be stored for contractual obligation are stored only in designated departments, such as Finance Department or Legal Department, and it is prohibited to disclose, copy, modify or take any action related to the Personal Data of customers outside of the Company without authorization or consent from the Data Subject.
7.3 The Company recognizes the importance of maintaining the security of the website system and electronic transaction services via application and in order to protect the user's data from destruction or intrusion from malicious persons or those who do not have access to the data, the Company established security measures for the website system and electronic transaction services via application that are consistent with the Company's Information Security Policy (Announcement No. 15, Policy and Regulation of the Use of the Information Systems of the Company).
7.4 The Company may enter into agreements with external agencies or personnel that are partners, parties to agreements, business alliances or representatives who are distributors, service providers or employees of the Company to develop and improve the products, services, systems or equipment used to increase the efficiency of the Company's operations or business operations. Such third parties will be limitedly informed of the user's Personal Data as necessary and with the consent of the Data Subject. In the event that the Company has hired a third party to process the Personal Data of the user, such as statistical analysis of the activities of the Company's website or business, sales promotion data transmission, etc., the Company will require said third parties to maintain confidentiality and security of the user's Personal Data and impose prohibitions on the use of such Personal Data in addition to the Company's business or website activities by specifying it as a clause in the contract or employment document, for example.
8. Data Subject Participation
The Company will only disclose details of Personal Data upon receipt of request from the Data Subject, successor, heir, legitimate representative or legal guardian by submitting a request and purpose of use via email: info PDPA@estarpcl.com, the processing for which will be completed by the Company within 30 days.
If the Data Subject, successor, legitimate representative or legal guardian have any objections to the storage, accuracy or any action, such as notification of Personal Data modification or deletion of Personal Data, etc., the Company will also record such objections as evidence.
The Company hereby certifies that the Personal Data of users collected by the Company will not be published to third parties for any other purpose, except under the following circumstances:
1) The Company has the consent or permission of the Data Subject.
2) To be used to successfully complete user transactions.
3) As permitted or enforced by law, such as court orders to disclose information to third parties, etc.
9. Data Subject Rights Regarding Personal Data
The rights of the Data Subjects in this section are legal rights of which the Data Subject should be informed. The Data Subject can request to exercise rights under the terms of the law and policies currently established or their future amendments, as well as the rules as established by the Company.
9.1 Right to Withdraw Consent: If the Data Subject has consented to the Company collecting, using and/or disclosing your Personal Data (whether you provided the consent prior to the effective date of the Personal Data Protection Act or afterwards), you have the right to withdraw your consent at any time for the duration of your Personal Data with the Company, unless there is a statutory restriction on that right or a contract that benefits you. Withdrawal of consent may affect you. Please study or inquire about the consequences before withdrawing consent for your own benefit.
9.2 Right to Access: The Data Subject has the right to request access to your Personal Data under the responsibility of the Company and ask the Company to make a copy of such data for you, including requesting the Company to disclose how the Company obtained your Personal Data by filling in the "Exercising of Data Subject Rights Request Form" and attaching the relevant documents and scan the documents and sending them to email: info PDPA@estarpcl.com. If you are currently an employee or personnel of the Company, you can update your Personal Data according to the Company's procedures.
9.3 Right to Data Portability: The Data Subject has the right to request to receive your Personal Data from the Company in a format that is easily read or used by an automatic device or equipment and that can be use or disclosed by automatic means. In addition, the Data Subject has the right to request that the Company transmit or transfer such Personal Data to another Data Controller when it can be done by automated means and has the right to request to receive the Personal Data transmitted or transferred by the Company directly to the other Data Controller unless this cannot be done due to technical reasons.
9.4 Right to Object to the Collection, Use and Disclosure of Personal Data: Data Subjects have the right to object to the collection, use and/or disclosure of your Personal Data at any time if the collection, use and/or disclosure of your Personal Data was done for necessary operations under the legitimate interests of the Company or another person or juristic person if it does not exceed the limits which you can reasonably anticipate or to carry out a mission for public interests. If you file an objection, the Company will continue to collect, use and/or disclose your Personal Data only if the Company can demonstrate that it is more important than your fundamental rights or it is used to establish, comply with or defend legal claims.
9.5 Right to Data Erasure or Destruction: The Data Subject has the right to request the erasure, destruction or anonymization of your Personal Data if you believe that your Personal Data has been collected, used and/or disclosed in violation of related laws, or deem the Company as no longer having a need to retain it for the objectives related to this Policy, or when you have exercised your right to withdraw your consent or exercised your right to object as stated above.
9.6 Right to Data Restriction: The Data Subject has the right to request that the use of personal data be temporarily suspended in the event that the Company is investigating your request to exercise the right to rectify your Personal Data or object to data processing, or in any other case in which the Company no longer has a necessity and is required to erase or destroy your Personal Data in compliance with related laws, but you request the Company to suspend its use instead.
9.7 Right to Rectification: You have the right to rectify your Personal Data, so it is current, complete and not misleading. If you are currently an employee or personnel of the Company, you can update your Personal Data according to the company's procedures.
9.8 Right to Complain: You have the right to file a complaint with the relevant legal authority if you believe that the collection, use and/or disclosure of your Personal Data is in a manner that violates or does not comply with applicable laws.
The exercising of your rights as stated above may be limited under applicable law, and there are cases in which it might be necessary for the Company to refuse or be unable to proceed with your request to exercise your rights, such as complying with laws or court orders in the public interest, when the exercise of rights may violate the rights or freedoms of other persons, etc. If the Company refuses the above request, the Company will also inform you of the reason for the refusal.
10. Personal Data Protection Officer
The Company has complied with the Personal Data Protection Act B.E. 2562 (2019) by appointing a Data Protection Officer (DPO) to monitor the company's conduct in relation to the collection, use and disclosure of Personal Data in accordance with the Personal Data Protection Act B.E. 2562 (2019), as well as laws relating to the protection of Personal Data.
11. Company Contact Channels
If you have questions or would like to inquire about the protection of your Personal Data, please contact us through one of the following channels:
Eastern Star Real Estate Public Co., Lt.
Address: 898, 5th Floor, Ploenchit Tower, Ploenchit Road, Lumpini, Pathumwan, Bangkok 10330
(1) Eastern Star Real Estate Public Co., Ltd. Sales Office
(2) Download Application: STAR FAMILY on both IOS and Android operating systems.
(3) Website : www.estarpcl.com
Personal Data Protection Officer
Contact Address: 898, 5th Floor, Ploenchit Tower, Ploenchit Road, Lumpini, Pathumwan, Bangkok 10330 Email: info PDPA@estarpcl.com
13.1 Guidelines on the Preparation of Agreements between the Controllers of Personal Data and Personal Data Processors.
13.2 Guidelines for Exercising the Rights of Data Subjects.
13.3 Guidelines for Handling Personal Data Subject Requests.
13.4 Personal Data Breach Notification Guidelines
13.5 Specifying access rights to information in the Information Technology Department/Personnel and Administration Departments.
13.6 Data storage by the Data Controller of each internal agency involved.
13.8 Cookies Policy
13.9 Other related documents (if any)
The Company pledges to retain Personal Data and not publish the Personal Data of users to third parties.
1. What Types of Personal Data Does the Company Collect?
The company collects moving or still images enabling recognition of you, your voice and your property, such as vehicles, when you enter an area under surveillance within any premises, buildings and areas belonging to the Company through CCTV systems and devices ("Data from CCTV").
2. Why Does the Company Collect, Use or Disclose Your Personal Data?
2.1 The Company may collect, store images, use, disclose, transfer and take any action, including but not limited to recording, record retention, alteration, edition, modification, destruction, erasure, recovery, compilation, copying, transmission, storage, revocation, revision and addition, in regards to your Data from CCTV and other Personal Data belonging to you for "CCTV inspection purposes" which are listed below. These actions are taken based on legitimate interests for the benefit of life and property, for legal compliance and for public interests according to consent, or on any other basis permitted by applicable law in Thailand (where those benefits will not interfere with the rights and benefits of any person), which may be determined in the following cases:
• To protect your life, body, personal health safety, and/or personal property.
• To control entry into buildings and ensure the safety of the buildings, personnel, employees and persons in communication with the Company as well as the Company’s property and data located or stored in the that location.
• To protect/safeguard the premises, buildings, areas and property of the Company from damage, disruption, destruction and other criminal actions.
• To effectively assist in resolving disputes that arise while conducting disciplinary actions or grievance consideration.
• To assist in investigations or proceedings related to complaints and whistleblowing.
• To be used to prove or refute civil case proceedings, including but not limited to labor case proceedings.
• To comply with the Company's legal obligations and/or to cooperate with the courts, authorities, government agencies and law enforcement agencies for the exercise of legal authority, including but not limited to occupational safety, health and environment. The Companies see the use of CCTV systems as a necessary measure to enable the Companies to meet those obligations.
• To exercise the rights of the Company or protect its legitimate interests, if necessary; to suppress, prevent and detect misconduct, crime or violation of the law and monitor incidents; to prevent and report misconduct or crime in the Company's stores and to protect the safety and security of the Company's business. The Companies will continue to strive to balance the legitimate interests of the Company and those of third parties and your fundamental rights and freedoms associated with the protection of data on the CCTV systems, as the case may be. The Company will endeavor to identify the necessary steps to achieve the right balance.
2.2 The company installs CCTV devices at key points within the Company's premises, buildings and other areas, except for certain areas such as changing rooms, restrooms and shower rooms.
2.3 The Company's CCTV system is activated 24 hours a day unless the equipment/system is disrupted and/or maintenance is required.
2.4 The Company places appropriate signs in places where the CCTV system is used.
3. Persons to Whom Your Personal Data May Be Disclosed
3.1 The Company will maintain the confidentiality of your Personal Data in the CCTV system and discloses or transfers such Personal Data only to its subsidiaries, affiliated companies, any present or future carefully selected external personnel, licensees, joint venture partners and/or service providers (who may be based overseas) to achieve CCTV inspection purposes as specified in this Policy.
3.2 External personnel to whom the Company may disclose Data from CCTV and other Personal Data relating to you including the companies within the Company’s group (as part of the legitimate interests of the Company and its affiliates to achieve the CCTV inspection purposes), government agencies, and/or supervisory organizations (to comply with legal obligations or to support or assist law enforcement organizations with civil or criminal investigations and court proceedings) and third-party service providers (following the Company's necessary procedures to ensure that the Company provides protection for your personal health and safety and property). However, access to CCTV data may mean accessor disclosure as necessary to deal with incidents that fall under one of the purposes specified in Section 3.2 or in response to a legitimate person's request under Section 2.1.
4. Overseas Transmission or Transfer of Your Personal Data
The Company may disclose or transfer your Personal Data from CCTV (as part of the procedures necessary for your health, personal safety and property) to a third-party based outside of Thailand and such disclosure or transfer will be made only with your consent or if it is required by other lawful bases to do so as permitted by law (e.g., to comply with the terms of the intercompany agreement with another person for your benefit). The aforementioned destination countries may or may not have similar Personal Data protection standards to Thailand. However, the Company ensures that the transfer of your Personal Data is done in compliance with the Personal Data Protection Law before proceeding with the transfer of the Personal Data.
5. Security Measures
5.1 The Company provides appropriate technical and security measures to protect Data from CCTV and Personal Data relating to you from unintentional, illegal or unauthorized destruction, loss, access, use, modification or disclosure.
5.2 The Company reviews and updates the Company's security measures occasionally as necessary or when relevant technologies are developed to ensure that the security measures are effective and appropriate and consistent with the minimum legal requirements as required by relevant government agencies.
6. The Company’s Retention Period for Your Personal Data
The Company retains your Personal Data obtained by the Company from the CCTV system for as long as necessary to achieve CCTV inspection purposes. If the Company is not permitted by applicable laws to continue to retain your Data from CCTV, the Company will erase the data from the its system and records. However, the Company may retain your Personal Data from CCTV for a longer period of time, for example, until the end of legal proceedings or when a law requires a longer retention period or the Data from CCTV contains certain data that must be retained for the continuation of certain events or in response to a request from a person to exercise their legal rights.
7. What Rights do You Have Regarding Your Personal Data?
Under the provisions of the law and the exceptions under applicable law. You may have the right to request access to and/or request to receive a copy, transfer, rectify, erase, destroy or anonymize some of your Personal Data in the Company’s possession, suspend and/or object to some types of activities on your Personal Data which the Company has or uses. In case of processes carried out by the Company with your consent, you may withdraw your consent, but it may cause the Company to not be able to provide you with the full service of the Company. You may have the right to request that the Company disclose how it obtains your Personal Data without your consent. In addition, complaints may also be filed with competent authorities under applicable law.
8. Company Contact Details
If you have any questions or concerns, or wish to exercise your rights regarding Data from CCTV, please contact the Company or the Company's Data Protection Officer at
Eastern Star Real Estate Public Co., Ltd. (Main Office)
• Address: 898, 5th Floor, Ploenchit Tower, Ploenchit Road, Lumpini, Pathumwan, Bangkok 10330
• Email: info_PDPA@estarpcl.com
• Phone: 091 949 0000
• Website : https://www.estarpcl.com/privacy-policy
Eastern Star Real Estate Public Co., Ltd. and companies in the group (the “Company”) give importance to Personal Data protection in order to comply with the Personal Data Protection Act B.E. 2562 (2019) and other applicable laws, including any future amendments (the "Personal Data Protection Law"). Hence, the Company has created a Cookies Notice to inform website users (“you”) of the Company’s Cookies data processing.
1. What Are Cookies?
"Cookies" are small text files that are installed or saved on your computer or electronic device when you visit the website. Cookies store your website usage data.
2. Purpose for Using Cookies
2.1 To help store your browser and settings data, and to help you access the website continuously and improve your experience and satisfaction.
2.2 To help assess performance and service provision results for websites with poor performance requiring improvement.
2.3 To collect and analyze website traffic and service usage data to help the Company understand people are interested in.
2.4 To enable the Company to provide a better website usage experience in addition to enabling the communication of services and announcements tailored to your interests.
3. Types of Cookies Used by the Company
3.1 Strictly Necessary Cookies
These Cookies are essential for the website’s functionality, allowing it to function normally. They are secure and allow you to access the website, such as website logins and identity verification. You cannot disable this type of Cookies via the Company's website.
3.2 Targeting Cookies
These Cookies collect data, which may include your Personal Data, and create profiles about you, so that we can analyze and present content, products/services and/or advertisements compatible with your interests. If you do not consent to our use of this type of Cookies, you may receive general information and advertisements that do not match your interests.
3.3 Functional Cookies
These Cookies help remember the data of the computer or device you use to visit the website, registration or log-in data and your previous website settings or options such as the language displayed on the website and delivery address, so you can use the website more conveniently without having to provide the data or settings every time you visit the website. If you do not consent to our use of this type of Cookies, your use of the website may be inconvenient and inefficient.
4. How to Disable Cookies
You can disable Cookies by using your browser and privacy settings to suspend future collection of data by Cookies.
5. Links to Third-party Websites