CU NEX Data Protection Policy
version 2.0

Chulalongkorn University is focused on connecting all dimensions of life in the university, propelling Chulalongkorn University to become the leading university in the digital lifestyle, through the use of the CU NEX and CU NEX STAFF application which aims to become the primary passport of the university's students and personnel providing solutions for living, enhancing learning experiences and teaching using technology. This is due to the fact that Chulalongkorn is on track to become the leading university in digital lifestyle in Thailand. Chulalongkorn cares about the importance of information as well as personal data rights of users. Therefore, Chulalongkorn wishes to inform you of its policies related to compiling data, collecting data, disclosing data and maintaining data of CU NEX users as follows:

1. Definitions
"You" means applications users (Chulalongkorn students and personnel)
"We" means Chulalongkorn University
"CU NEX" means the CU NEX and CU NEX STAFF application service provided by Chulalongkorn University and includes changes, upgrades, updates and additions added by Chulalongkorn University, as the case may be, but not including change, upgrades, updates or additions to the applications which are compulsory under other terms and conditions separate from this Privacy Policy.
"Business Partners" means persons or organizations who we have entered into agreement(s) to operate or administrate the use of the application or the application service, both currently and as developed or provided in the future, such as the KASIKORNBANK FINANCIAL CONGLOMERATE, Muang Thai Life Assurance Public Company Limited.
"Personal Data" means the personal data of a person that can identify a person either directly or indirectly under personal data protection laws.

2. General Provisions

The personal data protection policy was created in order to set forth the details and methods of processing the personal data of users. You acknowledge that we may improve or amend our personal data protection policy as set forth herein as well as that which is specifically provided in any parts of the application, in part or in full from time to time in order to coincide with the guidelines of usage of service and amended legal provisions. You can check the personal data protection policy at any time in this setting menu or by going to http://cunex.chula.ac.th/privacy/cunex_en.html. Any changes to the personal data protection policy will be shown on this application page and in the event that there is a material change, we will inform you through the appropriate channel.

In addition, this personal data protection policy will be used when registering/signing up to use the CU NEX application to access and use technology features or functions which appear on the application as well as related services that we offer in the application both currently and that are developed or provided in the future.

3. Data Collection

We collect data using various technologies which allow your device to remember data accessed through the application or how you used the application each time. Your data which we store ("Personal Data") is comprised of the following:

        Data from other sources which you provide us: We store the following data which you provide us:
        -    Registration for classes
        -    Applications for jobs in Chulalongkorn University
        -    Use of other applications as well as data of joining activities in the application, data from surveys, data from your account or data which you have updated in your account or data from contacting use or our team
        -    Data from identity proof and confirmation of your other accounts which is reliable that you are in control of, including, but not limited to, all data shown on your user history page and history of applications to use services, such as your name and surname, address, date of birth, sex, age, photo, email, bank account number, credit card number (if any), ID Card number, tax identification number, telephone number user account data, interests and all comments shown through the application (if any) which will be stored in your account
       
        Data directly received from your use of CU NEX: We store data on your use of the service and your method of use, including, but not limited to:
        -    Device data used when accessing the application
        -    Computer Traffic Log
        -    Data from contacts and communications between you and other users
        -    Data from use records such as device identification, computer IP address, device code, type of device, mobile network data, connection data, geographical location data, type of browser, access in and out of the application, referring websites, login log of history of use of the application
        -    Transaction log
        -    Customer Behavior
        -    Application access statistics
        -    Access Time
        -    Data of searches for various functions in the application and
        -    Data collected through other similar technologies

If you contact us or our team we may record your voice or the details of your contact using various methods subject to the personal data protection policy of the CU NEX Call Center.

The CU NEX system does not process sensitive information.

The above details are an example of the data we may collect. We will only collect your essential data and for a period sufficient for the purpose of using your personal data as provided in Clause 4.

4. Use of Personal Data

We use your personal data for the following purposes:

        1. To comply with legal requirements, including:
       
  • To provide the services in an orderly manner in compliance with applicable laws, rules and regulations as well as to comply with laws and regulations related or governing us, including, but not limited to the Computer Crimes Act BE 2550 as currently in force and as amended in the future
            2. For lawful purposes as follows:
           
  • To monitor and supervise your use to develop security standards of use of the service, procurement and protection of the technology infrastructure by using your personal data as necessary as well as requiring encryption prior to use and/or a sample check, a test of use by another person to manage risk, catch, protect or prevent fraud or other activities that may be unlawful or contravene regulations of use or agreements and conditions of use of our application ("Terms and Conditions of Using the CU NEX Application")
           
  • To improve the efficiency of provision of service
           
  • To contact you by telephone, sms, or mail or other channels to inquire or notify you or check and confirm your account data or ask for your comment or notify you of other information related to the provision of service as required
            3. For other purposes as you have given your consent, regarding our business such as:
           
  • For educational purposes, research, statistics, developing the provision of service and marketing or advertising to target groups as well as providing content, advertising , activities and promotions as well as making recommendations as appropriate for the service to match your interests
    5. Disclosure of Personal Data to Third Party

    We will not disclose your personal data to third parties that are unrelated to use of the CU NEX without your explicit consent. However, for the purpose of providing the application service to you, we may disclose your personal data to companies in our partner group or others such as persons engaged to process personal data, to use your personal data to increase efficiency of providing the services to you or to improve and develop the type of service and access to content through the application, to maintain security and safety of the application and the service network (the "Data Recipient" are KASIKORNBANK FINANCIAL CONGLOMERATE, Muang Thai Life Assurance Public Company Limited). Upon disclosure of personal data to such persons, we will cause such persons to maintain your personal data confidentially and not to use the data for any purposes outside of the scope which we have specified.

    However, if you believe that the person who we have disclosed your personal data to has used your personal data for purposes outside of the scope which we have specified, you can inform us to take action on our part and we recommend that you join us in the investigation, including whether you used the application, products or services of the person who received the data or not, since it may be possible that the person who received the data obtained the data from your use of the application service, products or services of the data recipient itself, in which case we are not responsible for the safety or privacy of your data which has been stored by an application, product or service of such data recipient. In such case, you should use caution and check the data protection policy of the application, product and service of such data recipient and check the data protection policy of the data recipient as well.

            In addition, we may be required to disclose your personal data in the following cases:
            -    As required by law, such as disclosure to government agencies, state agencies, agencies with duties to administrate the provision of service, agencies that oversee your activities and in the event there is a request to disclose the information under legal authority, such as for the purpose of court claims or legal proceedings or requests from private agencies or third parties related to the legal proceedings
            -    In the event of an organizational restructuring, merger or liquidation, in which case we may disclose your personal data in part or in full that we have stored to the relevant company
            In doing so, we will work to ensure that it is safe and that there is no effect on you.
           
            CU NEX does not transfer data overseas, but does use the Cloud such as:
            -    AWS, See Privacy Policy at https://aws.amazon.com/legal/?nc1=f_cc
            -    Azure, See Privacy Policy at https://azure.microsoft.com/en-us/support/legal/
    6. Legal Rights
            You can inquire about your rights under law as shown below via the CU NEX Call Center telephone number 02-008 6556 everyday 24 hours per day:
            -    Right to be Informed
            -    Right of Access
            -    Right to Rectification
            -    Right to Erasure
            -    Right to Restrict Processing
            -    Right to Object
    7. Security and Safety in Storing Personal Data

    We have created and chosen to use a personal data storage system which has a mechanism and technics that is appropriate as well as limitation of accessing your personal data from employees, staff and our representatives in order to protect your personal data from being accessed, amended or being unable to be used in an unlawful manner. You can see details of the IT Security Policy here.

    8. Contact Us

    You can contact us at CU NEX Call Center regarding personal data protection if you have any questions or concerns about the personal data protection policy by contacting CU NEX Call Center telephone number 02 008 6556 every day 24 hours per day.