drone vidya
1.0.4

Personal Data Protection Policy for Mandala

This Policy has been last updated on: 5 October 2023

We, AI and Robotics Ventures Co., Ltd. (hereinafter referred to as “Company” or “we”), value the importance of protecting your Personal Data (as defined hereinbelow). We have therefore made this Policy to explain how we collect, store, use, disclose, or otherwise process (“process” or “processing”) your Personal Data, and details of the rights in your Personal Data. Based on this, the Company hereby announces this Policy as follows:

1. Definition

1.1 “Administrator” means a User who registers for the Platform for his/her business, employer or organization, rather than registers for a user account for his/her own benefits. Depends on the services and functions available at the time of use, Administrator may be able to access Administrator’s features such as management and control of the accounts, etc.

1.2 “Certificate” means any certificate, license, permit and/or any other instrument issued by the competent authority(ies) for the use and operation of Drone including, without limitation, the National Broadcasting and Telecommunications Commission and the Civil Aviation Authority of Thailand.

1.3 “Company” means AI and Robotics Ventures Co., Ltd.

1.4 “Data Protection Laws” means laws and regulations which are related and applicable to the processing and protection of Personal Data including, without limitation, the PDPA.

1.5 “Data Subject” or “you” means a natural person who can be identified, whether directly or indirectly, through the Personal Data.

1.6 “Drone” means an Unnamed Aerial Vehicle, or a UAV, as defined in the applicable air navigation law, of the User.

1.7 “Equipment” means any device, tool and/or equipment which is a part or accessory of Drone.

1.8 “Insurance” means insurance which provides coverage for the use of Drone, which shall include insurance which provides coverage for third party due to or as a result of the accident occurred from the control or use of Drone.

1.9 “PDPA” means the Personal Data Protection Act B.E. 2562 (2019), as amended from time to time, as well as any rules, regulations, or notifications issued by virtue of the PDPA.

1.10 “PDPC” means the Personal Data Protection Committee established under the PDPA, having the duty and authority to regulate and issue relevant rules, measures, or other practices with respect to personal data protection pursuant to the PDPA.

1.11 “Personal Data” means any information relating to a natural person which enables identification of said person, whether directly or indirectly, but excluding the data of deceased person.

1.12 “Platform” means the mobile application, website and/or platform operated by the Company under the name “Mandala”.

1.13 “Terms and Conditions” means the Mandala’s Terms and Conditions.

1.14 “User” or “you” means any person who registers to use the Platform. User may also include an individual owner, representative or contact person of retail store or dealer, who registers to use the Platform, either for his/her own or as Administrator.

1.15 “Special Categories of Personal Data” means Personal Data pertaining to ethnicity, race, political opinions, doctrinal, religious or philosophical beliefs, sexual behavior, criminal records, health records, disability, labor union information, genetic information, biological information, or any data which may affect the data subject in the same manner, as prescribed by the PDPC.

1.16 “Supervisory Authority” means any agency having the authority to regulate business of the Company including, but not limited to, the PDPC.

2. Collection of Personal Data

We generally collect your Personal Data directly from you when you register for a user account on the Platform, where you record and upload your Personal Data on the Platform, and/or file a complaint, make a suggestion, have an inquiry, or communicate with the Company via any communication channels such as email, telephone, etc. We may also collect your Personal Data automatically using cookies or similar tracking technologies. These collections will however be subject to the Data Protection Laws. Your Personal Data will be conducted under, within, and through legitimate and fair objectives, scope, and methods, only to the extent as necessary to provide services to you, and for the purposes as described in this Policy. Generally, we process the following Personal Data about you:

Type of Personal Data

Examples of Type of Personal Data

Identification DataFirst name, last name, national identification card number, national identification card image, passport number, passport image, any other Personal Data contains on the identification card or passport such as expiration date, date of birth, nationality, photo
Profile and Account DataUser account and password, profile image, Pilot ID
Contact DataContact address, email address, contact number
Business-related DataLocation, name of store or business, contact information of business
Drone and Equipment DataDrone serial number, Drone’s Insurance-related information, Drone’s Certificate-related information, Drone’s flight operation dates. Flight duration, Drone ID, flight mission, flight history, flight operation
Data Collected AutomaticallyDate and time when the Platform is used, Platform usage duration, preferred language, IP address, device ID, Platform access and usage logs, and other information which needs to be stored by the Company in accordance with computer traffic law
Biometric DataBiometric Data
Other Platform DataFacebook account, LINE account, Google account

3. Purposes for Processing Your Personal Data

3.1 The purposes for processing your Personal Data, relevant types of Personal Data for each purpose, and the legal basis that the Company relies on for the processing of your Personal Data are as follows:

Purpose

Type of Personal Data

Legal Basis

To respond to your request to register to use the Platform, and to create a user account on the Platform.

  • Identification Data
  • Profile and Account Data
  • Business-related Data
  • Contact Data
  • Other Platform Data
  • Biometric Data

    		• Necessary for the purpose of proceeding with your request to register for a user account. We may process your Other Platform Data if you choose to register for a user account with us using your existing account with other platform providers such as Facebook, LINE and Gmail. For Biometric Data, we rely on your explicit consent.

    To enable you to access and use the Platform, including:

  • To allow you to record and track information of your Drone, Equipment, Certificate, Insurance, and to notify you, at your option, of the expiration of the Certificate and/or Insurance.
  • To allow you to prepare your flight, draw and generate map, track the usage of the Drone, manage and see the overview of flight mission, flight history and flight operation.
  • To enable you to log in to other pilot portal applications and platforms and/or drone’s related applications of the Company’s business partners using Pilot ID generated by the Platform, and export and import your data.
  • To provide you with academic resources and materials relating to the Drone and Equipment.
  • To arrange for activities and/or provide you with rewards for participation in such activities according to the terms and conditions of each activity.
  • To use the Platform for other services as may be determined by the Company from time to time.

  • Identification Information
  • Business-related Data
  • Profile and Account Data
  • Drone and Equipment Data
  • Data Collected Automatically

    		• Contractual obligation

  • To provide you with news on the events and activities relating to Drone.
  • To send you advertisements and promotions relating to Drone based on your interests and/or your behavior.

  • Identification Information
  • Profile and Account Data
  • Contact Data

    		• Consent

    To administer and manage the Platform, improve services, analyze, evaluate, and improve system, and to ensure that the Platform works properly and is safe.

  • Identification Data
  • Business-related Data
  • Profile and Account Data
  • Contact Data
  • Drone and Equipment Data
  • Other Data

    		• Legitimate interest

    To comply with applicable laws and take actions pursuant to any order, notification, rule, regulations issued by a government agency, Supervisory Authority, competent officer, or a court, which shall include compliance with the PDPA.

  • Identification Data
  • Business-related Data
  • Profile and Account Data
  • Contact Data
  • Drone and Equipment Data
  • Data Collected Automatically
  • Other Platform Data
  • Other Data

    		• Legitimate interest

    To establish, exercise, or defend, or to do otherwise with respect to the Company’s claims

  • Identification Data
  • Business-related Data
  • Profile and Account Data
  • Contact Data
  • Drone and Equipment Data
  • Data Collected Automatically
  • Other Platform Data
  • Other Data

    		• Legitimate interest

    To detect and prevent fraud, or the use of the Platform in a manner that is considered a criminal offense, or a violation of any applicable laws, rules, regulations, or Terms and Conditions.

  • Identification Data
  • Business-related Data
  • Profile and Account Data
  • Contact Data
  • Drone and Equipment Data
  • Data Collected Automatically
  • Other Platform Data
  • Other Data

    		• Legitimate interest

    To communicate with you on the use of any services on the Platform, to verify your identity, to respond to the User’s inquiries or concerns, and inform you about changes to the Terms and Conditions or policies of the Company, and also to notify you about suspicious account log-in.

  • Identification Data
  • Business-related Data
  • Profile and Account Data
  • Contact Data
  • Other Data

    		• Legitimate interest

    Remarks:

    (a) The Company may de-identify your Personal Data for statistical analysis and/or research in order to develop the Platform, or its features, and to provide services.

    (b) In cases where your Personal Data is necessary for the purpose of responding to your request to enter into an agreement with us – for example, to register for a user account and use our services provided on the Platform, or performing our other obligations under the agreement with you, if you do not provide your Personal Data under such circumstances, it may result in us being unable to respond to your request or perform said obligations including, but not limited to, our inability to register you as a User of the Platform, perform contractual obligations, or provide services, whether in whole or in part.

    (c) In cases where your Personal Data is necessary for the compliance with laws, court orders, or the orders of any competent officer or authority, your failure to provide Personal Data under said circumstances may result in you or the Company being deemed to be in violation of or non-compliance with the applicable law or the relevant order.

    (d) Apart from as expressly provided herein this Policy, we do not intend to collect any Special Categories of Personal Data of yours such as religious belief and/or the blood type and therefore, please do not upload image of your Thai national identification card on the Platform if it contains such special categories of Personal Data, or otherwise, please conceal or blind such special categories of Personal Data prior to uploading the image of your Thai identification card on the Platform.

    3.2 If the Company needs to process Personal Data beyond the scope of this Policy, the Company may notify about said additional processing activity, and/or obtain consent from the Data Subject as required by the law.

    8. Contact Details

    If you have any inquiries or concerns with respect to this Policy, or how we handle your Personal Data, or you would like to exercise your right in your Personal Data as specified above, please contact us at:

    AI and Robotics Ventures Co., Ltd.
    No. 33, 31, 31/1 Bhiraj Tower at Sathorn
    South Sathorn Road, Yannawa Sub-District, Sathorn District,
    Bangkok 10120 Thailand

    Email address:

    servicedesk@dronevidya.com

    or

    Company’s Data Protection Officer (DPO):

    Contact Channel:

    ARV.DPO@arv.co.th