Personal Data ProtectionPolicy

Introduction

Wisely Source Co., Ltd. (“Company”) as the platform provider offers services as an intermediary for searching/contacting freelance jobs, as well as an intermediary for posting/accepting freelance jobs, and/or advertising various freelance jobs through the Firaworld application and Firaman application.
The Company is fully aware of the importance of privacy and protection of personal data of the platform users (“you or personal data subject”). The Company has thus prepared this personal data protection policy in order to explain its practice of collecting, using, and/or disclosing personal data, as well as your rights as the personal data subject, in compliance with the Personal Data Protection Act B.E. 2562 (2019) and other laws which are related to personal data protection. The essential details of this policy are as follows:This personal data protection policy comes into effect from 1 December 2024.

Definitions

Under this personal data protection policy, unless otherwise provided, the following terms have the meanings as designated by their respective definitions, as follows:
“Company” refers to Wisely Source Co., Ltd. as the platform provider of Firaworld application and Firaman application.
“Platform” refers to Firaworld application and Firaman application.
“Personal data” refers to the data related to individuals, which are capable of identifying those individuals involved; this definition also covers any other data on any person that can directly or indirectly identify such a person.
“Sensitive personal data” refers to individual data that are truly private in terms of the individuals’ racial or ethnic origins; political opinions; doctrinal, religious or philosophical beliefs; sexual orientation; criminal records; health-related data; disabilities; data on trade unions; genetic data; biometric data; or any other data that similarly affect personal data subjects.
“Personal data subject” refers to an individual who owns the personal data.
“Personal data controller” refers to an individual or juristic person who has the authority to make decisions on the collection, use and/or disclosure of personal data. “Personal data processor” refers to an individual or juristic person who undertakes the collection, use and/or disclosure of personal data by the order of, or on behalf of, the personal data controller, without such an individual or juristic person being the personal data controller.
“Platform users” refer to personal data subjects who use services on the Company’s Firaworld application and Firaman application.
“Third parties” refer to the Company’s service providers, the Company’s business partners, social media websites, any third party who has acquired legal rights in accordance with applicable laws, lawyers and accountants for any dispute in which the Company is involved.
“Data protection officer” refers to the Company’s employee or contractor, who has a duty to provide advice on the compliance with the Personal Data Protection Act B.E. 2562 (2019) and other laws related to personal data protection.

1. Basis for personal data collection

The Company will collect, use and/or disclose (collectively referred to as “use”) your personal data upon your consent or when there is a legal basis for the use of your personal data (as the case may be). In this respect, the Company will use your personal data in accordance with the details contained in the following table below, but only in necessary cases or under legal basis. These details are shown in the following table

Legal basis

Objectives

Contractual Obligations Basis

To fulfill the Company’s obligations either as the personal data controller or the personal data processor, by functioning as an intermediary for searching/contacting freelance jobs, and an intermediary for posting/accepting freelance jobs, and/or advertising various freelance jobs.

Legal Obligations Basis

To comply with the laws, such as the Personal Data Protection Act B.E. 2562 (2019) and the Computer-Related Crime Act B.E. 2560 (2017).

Legitimate Interest basis

To use your personal data in cases where necessary for efficient delivery of platform services in accordance with the Company’s objectives and its lawful business operations, as long as such use of your personal data does not affect your rights, freedom and interests under the Personal Data Protection Act B.E. 2562 (2019) and other laws related to personal data protection.

Consent Basis

- To use your comments, opinions, or suggestions for the improvement of the Company’s platform services- To dispatch, transfer, or link your personal data to the third parties, who are other platform providers in support of the Company’s data operation and management.Note:- In case of the absence of no other appropriate legal basis, the Company will seek your consent prior to the collection, use and/or disclosure of your personal data in compliance with the Personal Data Protection Act B.E. 2562 (2019) and other laws related to personal data protection.- As the personal data subject, you have the right to revoke the consent you have given to the Company at any time.In this respect, the revocation of your consent will not affect the lawfulness of the personal data processing to which you have previously consented.

2. Types of personal data to be collected

The Company will collect your personal data under the following categories and examples.

Types of personal data

Examples of collected data

User account

User account, telephone number, email, password

Personal data

Your photo or ID card image, name prefix, name-surname, nickname, pseudonym, ID card, address, age, date of birth, sex, height, weight, marital status, nationality, religion, blood group, work data, licenses and certificates, telephone number, email, bank account

Data on person identification and authentication

Your photo or ID card image, ID cardNote:The Company wishes to inform you that in case of person identification and authentication, it does not intend to collect, use and/or disclose sensitive personal data, i.e. religious beliefs and blood group. The Company thus requests that you cross out or blacken out such sensitive data. Without doing so, the Company will presume that you consent to the Company to conceal that part of your personal data, and that those documents, photos or pictures remain fully valid and effective in accordance with applicable laws.

In case the Company is unable to conceal such data due to certain restrictions or any other reasons, the Company confirms that the personal data collected, used and/or disclosure by the Company is only for the purpose of identification and authentication. In this respect, it is deemed that the Company has received your express consent.  

Contact data

Address, telephone number, email

Account data

Account activity history and history of all chats, such as past purchase orders, cancellation of purchase orders, browsing history, data on interest, liking, suggestions and comments, survey responses, survey results, package details, work results, history of withdrawals and payment of fees.

Technical data

IP address, device ID, data on your platform access or on user behavior monitoring through cookies or any other similar technology, GPS data, and activity log data.

Other data

Any other data regarded as personal data under the Personal Data Protection Act B.E. 2562 (2019) and other laws related to personal data protection.

3. Personal data processing

The Company will collect your personal data for processing with the following purposes:
-To create and manage user accounts
-To identify and authenticate the users
-To provide platform services
-To provide search and employment
-To advertise services
-To make payments for purchase orders or service fees
-To deliver service results
-To manage the Company’s internal operations
-To improve the platform services in an unidentifiable manner
-To carry out marketing and PR campaigns in an unidentifiable manner
-To provide after-sales service support for platform users
-To collect comments, opinions, or recommendations
-To comply with the terms and conditions
-To comply with the laws and regulations

4. Personal data security

The Company is fully aware of the importance of your privacy and protection of your personal data. However, please be informed that no system is absolutely safe and secured all the time. The Company has thus prepared and developed a system for the collection, use and/or disclosure of personal data, which incorporates appropriate measures for security and confidentiality of personal data protection, in a way that your personal data be prevented from being unrightfully or illegally used, lost, destroyed, modified, or accessed.Your personal data that the Company has collected, used, and/or disclosed may be stored or processed by third parties who are other platform providers in support of the Company’s data operation and management systems. In disclosing personal data to the third parties who are other platform providers, the Company will take various measures to provide safe and secured protection of your personal data, which may include encoding and other forms of security. The Company will make appropriate efforts to ensure that the third parties who are other platform providers will maintain the confidentiality of your personal data and will not use them for the purposes that are outside the scope the Company has designated under this personal data protection policy.

5. Retention period of personal data

The Company will keep your personal data all through the time you use the Company’s platform services or maintain relations with the Company, or all the time that is necessary for the achievement of the objectives relating to this personal data protection policy. However, your personal data may be further stored from that period for your interests, and those of the platform users and the Company. Unless otherwise required by law, the Company will delete, destroy, or anonymize your personal data when they are no longer necessary or when the retention period has lapsed.

6. Personal data of minors

The Company is fully cognizant of the importance of the protection of personal data of minors (persons under 20), especially in the online environment. The Company does not have a policy of providing platform services to minors. Therefore, in collecting your personal data, if the Company knows that personal data of minors are collected, it will immediately erase such data from the Company’s database system.

7. Personal Data subject rights

The Company will collect and use your personal data only within the legally permissible scope. In this respect, your rights in accordance with applicable laws are as follows:

Types of rights

Explanative notes

Operational time

Right of access

You have the right to access and request copies of personal data that the Company has collected and stored in its database system as the personal data controller, except otherwise required by law, a court order, or in case such a request will affect the rights and freedom of other persons.

Immediately

Right to withdraw consent

You have the right to withdraw your consent at any time to the collection, use and/or disclosure of your personal data. In this respect, your exercise of this right might result in you becoming no longer able to access the platform, or not being able to use all or part of the services on the platform.

3 days

Right to rectification

You have the right to rectify your personal data so that they are corrected, updated, complete, and not misleading.  

3 days

Right to lodge a complaint

You have the right to lodge a complaint with the relevant person in authority if you believe that the collection, use and/or disclosure of your personal data have been undertaken in a manner that does not comply with the Personal Data Protection Act B.E. 2562 (2019) and other laws related to personal data protection.

3 days

Right to object

You have the right to object to the collection, use and/or disclosure of your personal data as the law permits, except that the Company has a lawful reason to reject your objection. However, your exercise of this right might result in you becoming no longer able to access the platform, or not being able to use all or part of the platform services.

30 days

Right to suspend the use of data

You have the right to ask the Company to temporarily suspend the use of your personal data in the case where the Company is examining your request to exercise your right to rectification of and to object to your personal data.

30 days

Right to erasure

You have the right to request the Company to erase, destroy, or anonymize your personal data, as is permissible in accordance with applicable laws. However, the Company may reject your request if it has a lawful reason to do so.

30 days

Right to data portability

You have the right to obtain your personal data, in case the Company has prepared them in a readable or usable format suitable for an automatic instrument or device. You also have the right to request the Company to send or transfer your personal data in such a format directly to other personal data controllers, unless the transfer cannot be undertaken for technical reasons.

30 days

8. Disclosure of personal data

The Company may disclose your personal data to the Company’s platform users or other persons under your consent or as permitted by applicable laws it, as follows:
- For the purpose of its internal management, the Company may disclose your personal data within the Company, as is necessary for the improvement and development of the delivery of the platform services. The Company may collect internal data for your use of platform services under this personal data protection policy for your benefits and those of other platform users.
- The Company may disclose your personal data to third parties, who are other platform providers, to support the Company’s data operation and management as is necessary for its various operations, such as the creation of user accounts, the use of chat messages, the payment and the withdrawal of money for purchase orders. In this regard, the Company maintains its own personal data protection policy and will make appropriate effort to ensure that the third parties who are other platform providers will also maintain the confidentiality of your personal data and will not use them for any other purpose that does not lie within the scope that the Company has defined under this personal data protection policy.
- In order to comply with the law, in case of a legal requirement or a request by a government organization, the Company will disclose your personal data only to the necessary extent to such as the court of justice and government agencies.

9. Sending or transferring personal data abroad

It may be necessary for the Company to send or transfer your personal data to third parties who are other platform providers to support the Company’s data operations and management, for example, sending or transferring personal data to be stored on cloud platforms or servers which are located abroad. In such a case, the Company will make appropriate effort to ensure that the third parties who are other platform providers abroad will maintain the confidentiality of your personal data and will not use them for any other purpose that lies outside the scope that the Company has designated under this personal data protection policy.In case the country of destination does not have sufficient standards for personal data protection, the Company will see to it that the dispatch or transfer of personal data is handled in accordance with the law, and the Company will take necessary and appropriate measures for personal data protection that are in line with the Personal Data Protection Act B.E. 2562 (2019) and other laws related to personal data protection.

10. Use of cookies

The Company may collect and use cookies and/or other similar technology when you access the Company’s platform. The collection and use of cookies and/or other similar technology will enable the Company to remember your activity patterns and preferences, as well as to analyze your interest with a view to improving and further developing the efficiency of the Company’s platform performance, such that it meets your needs and usages and provides you with good experiences in using the Company’s platform. You can gain further information from (click for further information on the cookie policy).

11. Revision of personal data protection policy

The Company may revise this personal data protection policy, so that it well accords with the delivery of services on the platform and/or complies with related laws. The Company will notify you of the revised version of the personal data protection policy and it will seek your consent again through the platform. This personal data protection policy is its latest revised version and will come into effect from [*].

12. The personal data protection policy of other platforms

This personal data protection policy applies to only the use of the Company’s platform. If you visit other websites or platforms, even via the Company’s platform, the protection of all your personal data will be in accordance with the personal data protection policies of those other websites or platforms, with which the company is not in any way involved.The table below displays the other websites or platforms, which represent all the third parties to which the Company maintain links and provides references insofar as their personal data protection policies are concerned.

The third parties to which the Company maintains links

Personal data protection policy

Firebase

Stripe

GetStream

13. Contact with the data protection officer

The Company has made arrangements for compliance with the Personal Data Protection Act B.E. 2562 (2019) and other laws related to personal data protection. It has appointed a data protection officer (DPO) to monitor the Company’s undertakings involving the collection, use and/or disclosure of personal data with a view to ensuring that such undertakings comply with the Personal Data Protection Act B.E. 2562 (2019) and other laws related to personal data protection. If you have any concerns or queries about this personal data protection policy, please contact:

Data Protection Officer Wisely Source Co., Ltd.
Address 165/49 Nirvana @work Ramintra VillageRamintra Road,
Anusawari Sub-district, Bang Khen District, Bangkok 10220
Tel: 02-821-6987 ext. 1
Email admin@wiselysource.com