1. GENERAL

At Continental Tyres (Thailand) Co., Ltd. (“Continental”, “we”, “our”, “us”), we are committed to protect your privacy through compliance with the Personal Data Protection Act 2019 (“PDPA”) and related laws.

By communicating, engaging with us or use our products and services, you acknowledge that you have read and understood this Data Protection Notice and agree and consent to the use, processing, disclosure and transfer of your Personal Data. If you provide us with Personal Data of any other person, you warrant that you have obtained the consent of such other person to disclose the Personal Data to us and to process such Personal Data in accordance with the terms of this Data Protection Notice.

Our Data Protection Notice may be updated from time to time without prior notice. The most recently published Data Protection Notice shall prevail over any of its previous versions. As such, please check our Data Protection Notice periodically, and especially before you provide us any of your Personal Data. By continuing to provide your Personal Data to us after any changes, revisions, or modifications to this Data Protection Notice shall indicate your agreement with the terms of such revised Data Protection Notice.

We do not knowingly collect Personal Data from children below the age of 20. If you are under the age of 20, you are required to obtain consent of your parents or legal guardian on your behalf to the processing of your Personal Data as described in this Data Protection Notice.

 

2. SCOPE OF THIS DATA PROTECTION NOTICE

This Data Protection Notice applies to the processing of your Personal Data for the Purposes set out in Section 3 below.

“Personal Data” means any information relating to an identified or identifiable natural person. You are identifiable as a person if you can be identified directly (e.g. by means of your name) or indirectly (e.g. by means of an anonymized e-mail address), but not including the information of the deceased persons in particular.

“Process”, “processing”, “process(ed)” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

 

3. PURPOSE FOR PROCESSING OF PERSONAL DATA

Your Personal Data may be processed for one or more of the following purposes:

• to process your application and/or register you as a customer, collaborator, or business partner (or a representative of the customer, collaborator, or business partner);
• to assess your continued provisioning of products and/or services;
• for credit checking with credit bureau or credit reporting agency;
• to conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks;
• for internal administrative purposes, including accounting and tax;
• to adopt measures to recover any debt owing to us;
• financial operation including to verify and process payment, billing and billing enquiries;
• to communicate with you;
• to deal directly with end-users of our products in relation to product returns, warranty claims or complaints or to respond to technical enquiries (including enquiries received through our website);
• to administer your participation in any of our survey, contest, campaign, or event;
• to run our external training courses;
• to operate and provide our product and/or service to you;
• for technical administration and/or to enhance of our product and/or service;
• for research and development;
• for market research and statistical analysis;
• for quality assurance;
• to administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data);
• to investigate complaints, suspicious transactions and to detect and prevent fraudulent activity;
• in compliance with any requirements by an authority and/or requirements of law;
• for record keeping, report generation and management analysis purposes;
• to send you information, promotions and updates including marketing and advertising materials;
• to measure or understand the effectiveness of the advertising we serve to you;
• to verify your training records either where you provide services to us or to verify training we provide to you, to industry bodies, and other relevant third parties;
• to manage visits made to our premises (including the monitoring of CCTV) and events, including assisting with visa applications; and/or
• any other purposes incidental and associated with any of the above.

The above shall collectively be referred to as “Purposes” in this Data Protection Notice. You represent and warrant that the consent of any other data subject whose Personal Data you provide to us, has been obtained to allow us to process the same for the Purposes set out above. “Business Partner” means including, but not limited to suppliers, consultants, vendors, brokers, merchants, dealers, distributors, contractors, agents, and other providers of other goods and services worldwide.

 

4. TYPE OF PERSONAL DATA COLLECTED

We may process different kinds of Personal Data about you as follow:

• Identity Data: name, gender, photograph or other image of your likeness, CCTV footage, username or similar identifier, National Registration Identification Card, date of birth, driving licence details, passport, visa, and other identification details.
• Contact Data: correspondence address, billing address, delivery address, email address, telephone number, facsimile number.
• Financial Data: bank account details, payment card details.
• Transaction Data: details about payments to and from you and other details of products and services you have purchased from us or through our dealer network. In the case of warranty claims or complaints in relation to our tyre products or service, this will also include information about your vehicle registration/mileage/tyres.
• Profile Data: your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
• Technical Data: internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access any of our websites.
• Usage Data: information about how you use/visit any of our websites, digital application, products, and services.
• Marketing and Communications Data: your preferences in receiving marketing from us and your communication preferences.

We also process aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your Personal Data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data which will be used in accordance with this Data Protection Notice.

 

5. METHOD OF COLLECTING PERSONAL DATA

We use different methods to collect Personal Data from and about you including through:

• Direct interactions. You may give us your Identity Data, Contact Data, and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide when you:   

        ◦  engage us to provide our products and/or services to you or we engage you to provide your products and/or services to us (or your employer does and you provide us with this data in the course of your employment);

        ◦  request marketing to be sent to you;

        ◦  take part in a survey, campaign, contest, or competition;

        ◦  make an enquiry through our website, digital application, by email, or by telephone;

        ◦  visit our premises (such as Contact Data and Identity Data given via our visitor registration system);

        ◦  give us some feedback or contact us;

        ◦  attend marketing events;

        ◦  attend training courses; or

        ◦  require assistance with a visa application.

• Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this data by using cookies, and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our Cookie Policy for further details.

• Third parties or publicly available sources. We may receive data about you from various third parties and public sources as follow:

        ◦   Identity Data, Contact Data, Financial Data, Transaction Data, Profile Data and Marketing and Communications Data for

- our dealer/distributor network to whom we supply tyres (for example, in relation to tyre or equipment returns or complaints).

-  third parties acting on behalf of our dealers/distributors (for example, in relation to promotions we participate in and which the end users of our tyres may sign up for).

- Technical Data from analytics providers.

-  Financial and Transaction Data from banks.

- Identity and Contact Data from publicly availably sources and/or public websites which display information about you.

- Identity Data and Contact Data from the providers of conferences which you and we may attend.

- Identity Data and Contact Data from your employer if they are engaged to provide products and/or services to us.

- Identity Data, Contact Data, and Financial Data from credit reference agencies.

 

6.  DISCLOSURE OF YOUR PERSONAL DATA

For the Purposes set out in Section 3 above, we may share your Personal Data with the following third parties:

• Internal Third Parties;
• External Third Parties; and/or
• Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this Data Protection Notice.

“Internal Third Parties” means Continental AG and its affiliated companies pursuant to section 15 et seqq. of the German Stock Corporation Act, as stipulated in the Binding Corporate Rules.

“External Third Parties” means:

• Contractors, service providers, and other third parties which we use to support our business (commonly referred to as the “Data Processor”). We take every measure to provide a comparable level of protection for Personal Data should the information be processed by a Data Processor.
• Regulators and other authorities acting as processors or joint controllers based in Thailand and worldwide who require reporting of processing activities in certain circumstances.
• Our dealers, distributors, and customers inside and outside Thailand who engage us or refer business to us to supply products and services involving the processing of your Personal Data.
• Industry bodies, including those who engage us to provide training services to individuals.
• Organisations that we partner or collaborate with, including events where we arrange attendance for customers/suppliers and members of the general public (including competition winners), and with whom Personal Data may be shared for your entry into, or attendance at, these events.
• In addition, we may disclose your Personal Data to comply with any court order, law, or legal process, including to respond to any government or regulatory request.

 

7. TRANSFER OF PERSONAL DATA TO PLACES OUTSIDE OF THAILAND

Insofar as it is necessary for the fulfilment of the Purpose, the Personal Data may also be transferred to jurisdictions where any of the third parties (defined in Section 6 above) are located, including outside Thailand. Whenever we transfer your Personal Data out of Thailand, we will ensure that we will protect your Personal Data by implementing adequate personal data protection standards for the transfer of your Personal Data outside Thailand. We will also ensure that any entity to whom your Personal Data will be disclosed will implement adequate personal data protection standards, and where your Personal Data is transferred to Internal Third Parties outside Thailand, we will use the relevant data transfer mechanisms (e.g. Binding Corporate Rules or other mechanisms as the applicable data protection laws may require or otherwise permit).

In all cases, we will transfer your Personal Data only where it is permitted and in compliance with the PDPA.

 

8. YOUR RIGHTS AS A DATA SUBJECT

As a data subject, you have the following rights in connection with the processing of your Personal Data:

• Right to access
• Right to rectification
• Right to withdraw consent (opt-out)
• Right to object
• Right to data portability
• Right to deletion or destruction
• Right to suspension
• Right to lodge complaint

In case of compelling reasons for collecting, processing, and use that outweigh your interests, rights, and freedoms, or serve the assertion, exercise or defense of legal claims, the collecting, processing, or use of Personal Data necessary for this purpose can take place.

You may contact us at the contact details in Section 17 below to exercise your rights in respect of any Personal Data that you have provided to us. However, we reserve the right to decline requests which jeopardize the security and privacy of the Personal Data of others as well as requests which are impractical or not made in good faith.

 

9. COOKIES

When you visit any of our websites, information can be stored on your computer in the form of cookies. Such cookies are used solely to ensure the operation of our website. Other cookies (e.g. relating to website use) are only created based on your consent (see Cookie Policy). You can also choose not to accept cookies in your browser settings. However, please note, that you may not be able to fully use several functions of our websites if you do so.  

 

10. ORACLE INFINITY

This website uses Oracle Infinity, a web analytics service provided by Oracle Infinity Inc. ("Oracle Infinity"). Oracle Infinity uses a cookie on our site, which is only set on the basis of your consent.

In this case, only data relating to the date and time of the visit, the pages visited, the use of the mouse pointer on the website, page functionalities used and the website from which you accessed the Continental websites are stored. Your IP address will be transmitted anonymously and will only be used for geographical classification at city level. Thus, there is no possibility of a unique identification of a website visitor at any time.

 

11. GOOGLE ANALYTICS

Our website uses Google Analytics, a web analysis tool from Google Inc. (“Google”). Google Analytics uses cookies, which are text files that are stored on your computer, to help our website analyze how users use the site. The information generated by the cookie about your use of our website will be transmitted to and stored on a Google server in the USA.

In case of activation of the IP address anonymization, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area (EEA). Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. Our websites use active IP anonymization. On behalf of the website provider, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for the website provider and providing other services associated with website activity and internet usage to our website provider.

Google will not associate your IP address with any other data held by Google. Cookies on our site are used only on the basis of your consent. Furthermore, you can permanently prevent cookies from being stored by making the appropriate changes in your browser settings. We wish to point out, however, that if you do so, you may not be able to make full use of all the functions of our websites. Furthermore, you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available here.  

Cookies on our websites are only stored based on your consent. Furthermore, you can permanently prevent cookies from being stored by making the appropriate changes in your browser settings. We wish to point out, however, that if you do so, you may not be able to make full use of all the functions of our website.

Our website use the following Google Analytics features based on Display Advertising:

• Google Analytics Demographics and Interest Reporting
• Google Display Network Impression Reporting
• Remarketing

We use Google Analytics Demographics and Interest Reporting. We use data from Google’s Interest-based advertising or 3rd-party audience data (such as age, gender, and interests) with Google Analytics for trend analysis and marketing.

We use Remarketing with Google Analytics on our website to advertise online. Third-party vendors, including Google, show our ads across the internet. We and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together to inform, optimize and serve ads based on your past visits to our websites.

You can opt-out Google Analytics for Display Advertising and customize Google Display Analytics Network ads using the Ads Settings here.  

 

12. QUALTRICS

Our website uses Qualtrics: a customer experience solution to collect feedback from users of the website through surveys in order to improve our products and services. Qualtrics does not collect information on pages where it is not installed, nor does it track or collect information outside of your web browser. Qualtrics only collects data when you actively complete a feedback survey. If you would like to obtain a copy of your Personal Data, have it corrected or deleted, please contact us. For more information, see the Qualtrics Privacy Policy here and the Qualtrics Security Policy here. For more information about Qualtrics and GDPR, please see here.

 

13. SHARING IN SOCIAL NETWORKS

If you use the “Share” function on our website, no Personal Data is transferred to the respective social media service. If you use your own profile to share our website content, we do not have any bearing on the content and scope of the data collected by these networks. The terms of use and privacy policies of the respective social network apply in this respect.

 

14. iFRAMING

We embed videos via iFraming on our website. External content from third-party websites can be embedded and displayed in defined areas on our website via iFraming.

Videos from the following third-party website are embedded on our website: 

YouTube:

Our website from which videos are embedded via iFraming is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

By clicking on the videos, it will be marked by the YouTube logo. You can find YouTube’s Data Protection Notice here.

If you visit one of or websites with embedded videos, the Internet Explorer will not automatically establish a link to the server on the appropriate network. By clicking on the embedded Video, you give your consent to communication with the aforementioned website and the placing of cookies by this website. By clicking on the embedded video, the information that you visited our website will be automatically forwarded to the aforementioned website operator and cookies will be placed by the aforementioned website.

If you are logged into the aforementioned website visiting our website, the data transmitted will be associated with your user account. If you wish to prevent a network from linking information with your user account in this manner, please log out from the respective network before clicking on the respective video.

Even if you are not registered as a member of the aforementioned website, or you are currently not logged in your data may be stored by the operator of the aforementioned website after you click on the respective video. We have no influence on the placement of third-party cookies and over the scope and content of the data collected by the aforementioned website or on how that data is used. For more information, please read the privacy policies of the aforementioned website.

 

15.  CHATBOT

We process your data in the context of chatbot in compliance with the applicable legal regulations. Data entered by you may be collected, processed and used by us for the purpose of analysis of AI effectiveness – to understand how the chatbot performs and engages with consumers. Insofar as necessary, the data may be passed on to the Internal Third Parties.

In ensuring the provision of services/processes/tools (e.g. technical support), we manage the servers on which the data is transmitted, stored, and processed insofar as this is necessary to execute the contract on the basis of the EU standard contractual clauses. In accordance with the statutory provisions, all your data are treated as strictly confidential. 

We only store Personal Data relating to users of our chatbot if consent for this has been provided. The only data that is stored relates to the date and time of the chat, the questions asked by the consumer, and the answers which the chatbot provided. We use this information to measure consumer engagement and satisfaction for the chatbot app, and to improve the services and information provided via the chatbot interface. 

Personal user data (if any collected) will be solely used to process inquiries in compliance with applicable data protection regulations. We may store data entered into chatbot only for the purpose of communicating personally with you. Your data is not readily visible to us without decoding, as we seek to protect your private information by randomly generating and assigning a unique user ID to each visitor.

 

16. SECURITY

We have implemented technical and organizational measures designed to secure your Personal Data from unauthorized access, use, alternation, manipulation, loss, destruction, or disclosure. The security measures are continually improved and adapted in accordance with the latest technology.

Unencrypted data can possibly be viewed by third parties. For this reason, we would like to point out that, with regard to data transmission over the internet (e.g. by e-mail) and mobile platforms, secure transfer cannot be guaranteed. Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL). You can determine the SSL status of the connection by looking at the address line of your browser ("https"). If you access pages and files and are then asked to enter personal data, please note that the transmission of such data via the internet may not be secure and that there is a risk that it may be viewed and manipulated by unauthorized persons. Any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures we provide.

 

17. CONTACTING CONTINENTAL

If you have any questions or would like to exercise any of your rights listed in Section 8 above, please contact us at:

Address:                Continental Tyres (Thailand) Co., Ltd.

                               16th Floor, G Tower, South Wing

                                9, Rama 9 Road, Huay Kwang, Bangkok 10310 Thailand        

Phone number:    +66 2232 1800

E-mail:                    TI_RN_SM_DataProtectionTireThailand@continental.com

 

18. LANGUAGE

This Data Protection Notice is issued in both English and Thai languages. In the event of inconsistency between the English version and the Thai version, the English version shall prevail.

 

This Data Protection Notice was last updated on 8 August 2024.