Privacy policy
Personal Data means any information related to a person, which enables the identification of such person, whether directly or indirectly. For example, name address e-mail address Identification Number.
Sensitive Data means special category of personal data that needs appropriate protection and carefully collect, use or disclose. Sensitive Data pertains racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data and biometric data.
We collect your information when:
- You use our website
You provide information to us through our website or applications
- You provide information to us when you make enquiry via online or offline channel
| Contact Data (Contact Data) | Includes name-surname, address, email, telephone number, interested properties or project, budget range, reasons to purchase or sell the property. |
| Technical Data | Includes internet protocol (IP) address, browser type and version, time zone setting and location, operation system and platform and other technology on the devices you use to access this website. |
| Usage Data | Includes information about your use of our service through and from our website, websites that you view, elements you viewed or words you searched for in platforms, date and time of visit, and interaction information such as clicks on item in a website. |
| Communication Data (Communication Data) | Includes email, notes of conversation, communication notes. |
| Contract-related Data | National identification number, address, credit card number, date of birth, sex. |
1. We receive your personal data directly
from you through the following channels:
You register with us by creating an account on our website or application
You make a query with us relating to your interested property/ project.
You make an appointment with us to visit the project site.
You provide information to us when you visit the project site.
You participate in our marketing activity through an electronic platform, social media, or an offline platform
2. We receive your personal data from a third party
that collects, uses or discloses your personal data as instructed by us or on our behalf. Your personal data will not be used other than the purposes for which we instruct or require such third party to do. We require such third party to protect confidentiality of your personal data and to have measures to protect your personal data as required by the Thai personal data protection law.
3. We receive your personal data from cookies
when you visit our website. This data helps us provide you better, faster, safer services and for your own privacy when you use the service and / or enter the platform.
We may use your personal data to the extent permitted by the personal data protection law. We only collect your personal data as necessary and to the extent that is related to provision of our service to you, where it is necessary:
For our legitimate interests or any other person and your interests, which do not override your fundamental rights;
For the performance of a contract to which you are a party, or in order to take steps at your request to enter into a contract;
For compliance with a law to which we are subjected or for preventing or suppressing a danger to a person’s life, body or health.
We explain in the table below about how we use your personal data, and which lawful basis we rely on to do so.
| Purpose/activity | Types of data | The lawful basis of processing |
| 1. To provide service including communicate with you about a residential project that you are interested to buy or sell. | - Contact data - Communication data | 1. Necessary for the performance of contract 2. For our legitimate interest to provide information to you on your interested property/ project. |
| 2. To manage our relationship with you. | - Contact data - Communication data | 1. Necessary for the performance of contract 2. For our legitimate interest to recommend a project that meets your needs and to keep our records and study the way that customers use our service to improve our business. |
| 3. To administer our website, improve our business, solve a technical problem on website, and publicize customer satisfaction survey. | - Contact data - Technical data | For our legitimate interests to use statistical and usage information on website to plan our business strategy in order to increase efficiency of our service. |
| 4. To use data analytics to improve our website, our services and customer relationships and experiences. | - Technical data - Usage data | For our legitimate interests to define types of customers and the nature of their usage as well as to keep our website updated and relevant to respond to customers’ way of using our service. |
| 5. To enter into a contract relating to property purchase. | - Contact data - Contract-related Data | For necessity for the performance of the contract in which you are a party to the purchase and sale of a residential project. |
| 6. To provide a direct marketing to you in offering projects or other services that might be of your interest. | - Contact data | We will obtain your explicit consent in allowing us to use your personal data for direct marketing purposes to offer residential projects or other services that you might be interested in. |
| 7. To be an agent for selling property to affiliated company | - Contact data - Contract-related Data | 1. Necessary for the performance of contract 2. For our legitimate interests to provide information that might be of your interest. |
We may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data.
Our affiliated companies;
Online advertising platforms;
Marketing companies or consultants;
Regulator such as the Office of the Personal Data Protection Committee;
Professional advisors and consultants
such as prevention of a danger to a person,
legal compliance, setting for an indictment, exercising legal rights, and preventing fraud.
as prescribed by the Personal Data Protection Committee or when such transfer is allowed in one of the circumstances permitted by the Personal Data Protection Act B.E. 2562.
Restrict access to personal data which may be accessed by employees, agents, contractors and other third parties. They can only access your personal data on our instructions, and they are subject to a duty of confidentiality and protection of personal data.
Provide technological methods to prevent unauthorized access to computer systems.
Destroy your personal data for security purposes when such information is no longer needed for legal and business purposes.
Put in place procedures to deal with any suspected personal data breach and will notify a regulator of a breach where we are legally required to do so.
We will keep your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, purpose and sensitivity of the personal data, the potential risk of harm from unauthorised use of your personal data, and the applicable legal requirements.
We collect your personal data obtained from cookies when you use our website. We will keep your personal data for no more than 13 months or as required by relevant laws.
Data subjects have the right to proceed to the extent permitted by law as follow;
1. The data subject shall have the right to withdraw his or her consent at any time. When processing personal data, you give us consent throughout the duration of your personal data with us (The Right to withdraw).
2. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, request for a copy of his or her personal data, including request to disclose personal data acquisition that you did not give us consent to (The Right to Access).
3. The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her (The Right to Rectification).
4. The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay (The Right to Erasure).
5. The data subject shall have the right to obtain from the controller restriction of data processing (The Right to Restriction of Processing).
6. The data subject shall have the right to transmit their personal data to another controller without hindrance from the controller to which the personal data have been provided (The Right to Data Portability).
7. The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. (Right to Object)
You can contact the DPO or company’s staff in order to proceed with the request to exercise the above rights.
We may conduct marketing activities and promotion or use third parties as instructed by us to do so:
In case that we use your personal data for a purpose of providing a direct marketing to you, we will be able to do so only when you give us explicit consent and we have already informed you the purpose of your personal data’s use on direct marketing. However, you can withdraw your consent on direct marketing with us at any time through our opt-out system.
In the case of your participation in our sale promotional activities such as gaming activities or other activities through various social network channels for promoting our products and services to the public, we will not process your data for direct marketing unless you give us an explicit consent to use your personal data for direct marketing and we have already informed you the purpose of your personal data’s use on direct marketing. However, you can withdraw your consent on direct marketing with us at any time through our opt-out system.
Cookies for website operations (Functionality Cookies): We use this type of cookies to help us remember your device or browser. Thus, we can quickly create content in consistent with your personal interests as well as provide the service and platform more convenient and beneficial to you. By disabling this cookie, you can set up your device by watching helping methods on your browser or device.
Cookies for analytics (Analytic cookies): We use Analytics Cookies providing by Facebook and Google for analyzing how visitors use our website with the objective of offering products or services via Social Media. In case you do not allow those third parties process your personal data, you can choose to disable this type of cookies on our website.
Data Controller’s information
Bangkok Citismart Company Limited
ที่อยู่ : 170/48 15th Floor, Ocean Tower 1, Ratchadapisek Road.,
Klongtoey, Bangkok 10110
Tel : 02-6618999
E-mail: dpo@bkkcitismart.com