Privacy Notice
Yarix Asia Pacific Co., Ltd. (hereinafter referred to as “Yarix APAC” or “the Company”), having its registered office No. 2556, 66 Tower, Room 436, 4th Floor, Sukhumvit Road,
Bang Na Nuea Sub-district, Bang Na District, Bangkok 10260, VAT no. 0105568115264,
hereby informs users of the methods and conditions applied by the Company in relation to the processing of personal data.
This privacy notice specifically concerns the personal data of users who access and use the Company’s website, available at the following domain: https://apac.yarix.com/.
The Company acts as the Data Controller, meaning a person or juristic person having the power and duties to make decisions regarding the collection, use, or disclosure of personal data, pursuant to Section 6 of the PDPA.
In accordance with the applicable data protection legislation, users who access and interact with the Company’s website shall be considered Data Subjects, meaning natural persons to whom the processed personal data relates.
This Privacy Notice does not apply to any third-party websites that may be accessed by users through links present on the Company’s website, including social media buttons (Social Buttons). These Social Buttons are digital icons or direct links to the Company’s social media profiles (e.g., LinkedIn, Facebook, Twitter, YouTube). By clicking these links, users are redirected to the respective social media platforms, whose operators act as independent Data Controllers. Therefore, any information concerning how those platforms process personal data can be found in their respective privacy notices.
1. Categories of Personal Data Processed
In connection with the use of this website, the Company may process the following categories of personal data:
- Browsing Data:
The computer systems and software procedures used to operate this website acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of users’ computers, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server response status (successful, error, etc.), and other parameters related to the user's operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of the website and to ensure its proper functioning. Browsing data are retained for no longer than 24 months, unless required otherwise by judicial authorities in the event of suspected criminal offences. Such information may also be collected through cookies or other tracking tools. For more information, please consult our Cookie Policy.
b) Personal Data Voluntarily Provided by Users:
The voluntary, explicit, and discretionary transmission of personal data to the Company via the website’s forms entails the acquisition of the user's email address, along with any other personal data necessary for the Company to respond to specific requests.
c) Key Performance Indicators (KPIs):
The Company may process data related to website views, post views, and user interactions for the purpose of enhancing website performance and user experience.
- Personal data provided in the context of applications:
If the user voluntarily submits their curriculum vitae or other personal data for application purposes. The data will not be transferred outside the territory of Thailand.
2. Purposes and Legal Bases for Processing
a) With reference to the data under Section 1(a), personal data is processed automatically and strictly as necessary to allow website navigation. In this case, processing is based on the performance of a contract and legal obligations to which the Company is subject (Section 24(3) of the PDPA), specifically to ensure the proper functioning and security of the website. Express consent is therefore not required.
b) With reference to the data under Section 1(b), personal data is processed for the purpose of providing users with information or assistance. The processing is based on the performance of pre-contractual measures at the user’s request and does not require express consent (Section 24(3) of the PDPA).
c) With reference to the data under Section 1(c), the processing is aimed at enhancing website interaction and performance analysis. The legal basis for such processing is the Company’s legitimate interest, and therefore, express consent is not required (Section 24(5) of the PDPA).
d) With regard to the personal data referred to in point 1), letter d), of this notice, the processing is carried out for the purpose of evaluating the application and, if applicable, contacting the candidate. The processing is based on the performance of pre-contractual measures taken at the request of the data subject (Section 24, no. 3 of the PDPA).
3. Nature of the Provision of Personal Data
Except for browsing data, which are necessary for technical purposes related to website navigation, the provision of personal data by users is voluntary.
With respect to the contact form available on the website, users are free to provide their personal data. However, failure to provide such data will render the Company unable to process requests for information or assistance.
4. Methods and Duration of Processing
Personal data is processed by individuals duly authorized by the Company and instructed for such purpose.
Processing is carried out by automated means for website access data; for further details, please refer to our Cookie Policy.
In any case, processing is carried out in full compliance with applicable regulations, ensuring the security, confidentiality, accuracy, relevance, and timeliness of personal data in relation to the purposes specified in this Privacy Notice.
While browsing data (Section 1(a)) are not retained for more than 24 months, and personal data provided in the context of applications are processed for a maximum period of 12 months from the date of receipt, all personal data are retained only for the period strictly necessary to achieve the purposes for which they were collected, or otherwise in accordance with legal obligations.
The Company has implemented specific security measures to prevent data loss, unlawful or improper use, and unauthorized access to personal data.
5. Data Subjects’ Rights under Sections 30, 31, 32, 33 of the PDPA and Contact Information
Users, as data subjects, are entitled to exercise their rights under Sections 30, 31, 32, and 33 of the PDPA, including the right of access, data portability, erasure, and objection.
These rights may be exercised by contacting the Company at the following address: digitallaw&dataprotection@vargroup.it
The Data Controller may be contacted as follows:
- Phone: +66 2117 9668
- Address: No. 2556, 66 Tower, Room 436, 4th Floor, Sukhumvit Road, Bang Na Nuea Sub-district, Bang Na District, Bangkok 10260
6. Data Protection Officer (DPO)
The Data Protection Officer may be contacted at the Company’s registered office or via the following email address: dpo@sesa.it