Privacy Notice

CMDF collects and receives your Personal Data via the following methods:

1. Personal Data which you directly provide to CMDF: You may directly provide your Personal Data to CMDF. This case usually occurs when you contact CMDF to make enquiries, complete forms either by online or by document, apply for services or join activities, request for information, receive marketing communications, or provide comments or feedback to CMDF, etc.
2. CMDF อPersonal Data which CMDF automatically collect from you: CMDF may automatically collect some technical information, in relation to your devices, activities and visiting patterns and browsing history, by using Cookies and other similar technologies. For more details, please see Cookies Policy
3. Personal Data which CMDF receives from third parties: CMDF may, from time to time, receive your Personal Data from third parties, such as the Stock Exchange of Thailand, the Securities and Exchange Commission, issuer of securities, asset management companies, securities companies, brokers, agents, banks, service providers, job recruiters, government organizations, contracting parties and professionals, personnel of CMDF and candidates

Personal Data which CMDF collects and processes under this Privacy Notice is the Personal Data of the following categories of data subjects:

1. Customers and Investors, i.e., natural persons who are securities holders, website visitors, service recipients, seminar participants, and other persons who contact CMDF to request information or services from CMDF, regardless of whether such Personal Data was directly or indirectly received.
2. Contracting Parties, Professionals, and other persons relating to the business of CMDF, i.e., natural persons who are contracting parties or contractually related with CMDF, including business partners, sellers, suppliers, service providers, contractors, advisers, investment professionals, and other similar persons.
3. Personnel of CMDF, i.e., natural persons who are staff, employees, or persons who work for CMDF, directors, managers, executives, professionals, and persons who directly receive monthly salaries, wages, benefits, or any other types of compensation from CMDF, including the family members of such personnel of CMDF.
4. Candidates, i.e., natural persons who submit an application or details relating to their profile to CMDF, either in written or verbal form, with the purpose of applying for a job, internship/scholarship as staff or employees/interns/scholarship applicants of CMDF who are not yet chosen by CMDF, including the family members of such candidates and references.

Your Personal Data which is collected and processed under this Privacy Notice, regardless of whether such Personal Data was directly provided by you to CMDF, automatically collected from you by CMDF, or provided to CMDF by third parties, such as:

1. Personal Data such as first name, last name, date/month/year of birth, age, gender, identification number and copy of passport or ID card, signature, nationality, marital status, and family members information.
2. Sensitive Personal Datasuch as religion, criminal record, health data, health examination results, disability, and biometric data.
3. Contact detailssuch as address, telephone number, email, social media contact details, and details of emergency contacts.
4. Financial informationsuch as bank account number and information regarding various types of tax.
5. Information regarding the use of systems of CMDF such as information regarding the registration or subscription for using CMDF’s systems (e.g., CMDF Member system, Investor Portal system, CRM system, Prof. Link system, CMDF Registration system, etc.), user account, account profile, username, password, and PIN (if any), information displayed on account profile pages and services applying pages, information in your account profile that is edited or amended by you, information received from other accounts that CMDF has a reasonable cause to believe you are controlling, service usage information, all interests and comments you express through CMDF systems (if any), your activities participation information in CMDF systems, survey information, and information received from your communication with CMDF or CMDF’s working team.
6. Technical information such as the information of access to CMDF’s websites and systems, computer traffic data (Log), contact and communication information between you and other users, information from using records e.g., device indicator, computer IP address, device identification number, type of device, mobile phone network information, connecting information, geological information, browser category, system access record, information of referring application or website, use of system record, login log information, transaction log information, customer behavior information, system access statistics, access time, your searching information, the use of functions in systems, and information that CMDF collects through the use of cookies or other similar technologies.
7. Academic, Training, and Work Experience information such as academic and training background, academic certificate or transcript, result or ranking of points, level of education, language skills, professional licenses information, registration number, registration starting date, registration expiration date, registration renewal information, duty performance information, work starting date, information of training and tests provided by CMDF or other relevant organizations, diploma, certificate, work experiences, and monthly salaries or wages.
8. Other information such as photographs and/or voice recordings by means of closed-circuit television (CCTV), photographs, footage, videos, voice recordings of conversations, and purchasing tendencies of goods or services.

In the event that CMDF collected your Personal Data before the Personal Data Protection Laws come into force, CMDF will continue processing such Personal Data in accordance with the Personal Data Protection Laws and will continue to collect and use your Personal Data pursuant to the original purpose for which you have given your consent to CMDF. In case you no longer wish CMDF to collect and use such Personal Data, you may inform CMDF to request the withdrawal of your consent at any time.

CMDF processes your Personal Data for the following purposes (collectively referred to as “Specified Purposes”) and under the following legal basis

1. Necessary for the performance of a contract which you have entered into as a party with CMDF or for complying with your request prior to entering into such a contract;
2. For compliance with the law by CMDF;
3. Necessary for the legitimate interest of CMDF, or other persons or juristic persons other than CMDF;
4. Necessary for the performance of a task carried out in the public interest by CMDF, or for the exercise of official authority vested in CMDF;
5. For preventing or suppressing danger to life, body, or health of a person;
6. For the achievement of purposes related to research or statistics, for which suitable safeguard measures to protect your rights and freedoms have been implemented;
7. Consent which you have given to CMDF, where exceptions or legal bases specified above cannot be relied upon, or according to the cases specified in the table below. In cases where CMDF has specifically requested consent from you for any Personal Data, CMDF will process such Personal Data according to the purpose which you have been informed of and consented to, and CMDF will only process any Personal Data that constitutes sensitive Personal Data if CMDF is able to do so under the laws or has obtained explicit consent from you.

As the Personal Data which CMDF will process for the Specified Purposes as stated in Clause 6.1 above relates to compliance with the laws or contracts, or is necessary for entering into a contract with you, such Personal Data is necessary for achieving the Specified Purposes. If you do not provide such Personal Data to CMDF, there may be a legal impact, or CMDF may not be able to perform its legal obligations under contracts or any other agreements entered into with you, or may not be able to enter into contracts or any other agreements with you (as the case may be). In such cases, CMDF may be required to decline to enter into contracts or any other agreements with you, or terminate the relevant services to you, either partially or entirely.

In the event that CMDF intends to use your Personal Data for a purpose not specified above, CMDF will provide an additional privacy notice to explain the use of Personal Data for such purpose. You should read such additional privacy notice along with this Privacy Notice.

CMDF may disclose your Personal Data under the Specified Purposes and in accordance with the laws and regulations to the following entities and persons:

1. CMDF and the Companies in CMDF Group, including their staff, employees, directors, managers, or personnel of CMDF as deemed relevant and necessary (on a need-to-know basis), for the processing of your Personal Data;
2. Government organizations and regulatory authorities according to the laws, such as the Securities and Exchange Commission, Bank of Thailand, Office of the Official Information Commission, Office of Insurance Commission, Department of Provincial Administration, Revenue Department, Department of Business Development, and Department of Intellectual Property;
3. Organizations requesting the disclosure of information by virtue of the laws, such as for prosecution or legal proceedings, for example, Anti-Money Laundering Office, National Anti-Corruption Commission, Royal Thai Police, Department of Special Investigation, Office of the Attorney General, and the courts;
4. Associations related to the capital market business in Thailand, such as the Thai Listed Companies Association, Association of Thai Securities Companies, Association of Investment Management Companies, Thai Bankers Association, Securities Analysts Association, and the Thai Investors Association;
5. Issuers of securities, member companies, securities companies, asset management companies, and brokerage firms;
6. Alliances, business partners, service providers, service recipients, and Data Processors assigned by CMDF to provide services or manage Personal Data, such as improving or maintaining the security standards of systems and technology systems, payment systems, audit, human resource management, or other services that may be beneficial to you.

Right to Access

You have the right to access your Personal Data and may request CMDF to provide you with a copy of such Personal Data in accordance with the requirements under the Personal Data Protection Laws. This includes disclosing how CMDF receives your Personal Data, which is collected, used, and disclosed by CMDF without requiring your consent, to the extent permitted by the Personal Data Protection Laws.

Right to Data Portability

You have the right to obtain your Personal Data in a format that is readable or commonly used by automatic tools or equipment. You may also request CMDF to send or transfer your Personal Data to another Data Controller or to you, unless it is technically unfeasible. Your rights to data portability shall be in accordance with the requirements under the Personal Data Protection Laws.

Right to Object

You have the right to object to the processing of your Personal Data, and CMDF will consider this in cases where:

1. processes your Personal Data based on legitimate interests or public interests, except where CMDF can demonstrate compelling legitimate grounds, or where the processing is necessary for establishing, complying with, or defending legal claims;
2. processes your Personal Data for direct marketing purposes; or
3. processes your Personal Data for scientific, historical, or statistical research, unless it is necessary for conducting activities in the public interest of CMDF.

If you object to the processing of your Personal Data, please indicate whether you wish to delete your Personal Data or to restrict CMDF from processing such Personal Data.

Right to Erasure

You may request CMDF to delete, destroy, or anonymize your Personal Data in certain circumstances, including:

1. There is no further necessity to retain your Personal Data according to the Specified Purpose for processing;
2. You withdraw your consent, which is the basis for collecting and processing the Personal Data, and CMDF has no legal ground for continuing to process it;
3. You object to the processing as mentioned in Clause 10.3; or
4. The collection or processing of your Personal Data is unlawful.

These cases do not apply to processing necessary for freedom of expression, preparing historical or statistical documents, performing a task carried out in the public interest, complying with the law for public health or preventive medicine, or for establishing, complying with, or defending legal claims.

Right to Restriction

You have the right to request a restriction on the processing of your Personal Data in certain circumstances:

1. CMDF is verifying the accuracy of Personal Data as per your request;
2. You request a restriction on the use of Personal Data that is to be deleted or erased according to Clause 10.4;
3. CMDF has no further necessity to use your Personal Data, but you request CMDF to retain it for establishing, complying with, or defending legal claims; or
4. CMDF CMDF is verifying according to Clause 10.3 (a) or Clause 10.3 (c) to address your objection request pursuant to Clause 10.

Right to Rectification

You have the right to request that your Personal Data be rectified if it is inaccurate, outdated, incomplete, or likely to cause misunderstanding.

Right to Withdraw Consent

If CMDF relies on your consent as the legal basis for processing your Personal Data, you have the right to withdraw such consent at any time while your Personal Data is in the possession of CMDF.

Right to Lodge a Complaint

If you have any concerns or questions about any aspect of CMDF’s practices in relation to the processing of your Personal Data, please contact CMDF using the contact details set out in Clause 13 (How to Contact CMDF) of this Privacy Notice. In case of an alleged infringement of Personal Data Protection Laws, you have the right to lodge a complaint with the Office of Personal Data Protection Committee.

CMDF will make every effort to facilitate and act on your request without delay, unless fulfilling such requests causes undue burden, involves excessive or disproportionate effort, risks violating the protection of others’ Personal Data, or is otherwise illegal or impossible to perform.