1. Introduction

We, GAA GROUP COMPANY LIMITED, are committed to safeguarding your personal information. This Data Protection Notice (“Notice”) sets out the basis on which we collect, use, and disclose personal data of our customers in accordance with the Thailand Personal Data Protection Act B.E. 2562 (“PDPA”).

 

2. How We Collect Personal Data

• Personal data is collected by lawful and fair means. We collect data when you:
• Enter into a contract for our construction or infrastructure services.
• Visit our websites and provide contact information.
• Communicate with us via calls, emails, or written correspondences.
• Submit a resume for recruitment purposes.

 

3. Lawful Bases for Processing

Unlike the Singapore version, the Thai PDPA requires us to identify a specific lawful basis for processing:

• Contractual Necessity: To fulfill our service obligations to you.
• Legal Obligation: To comply with applicable Thai laws, such as tax or safety regulations.
• Legitimate Interests: For our business improvements or security, provided these do not override your fundamental rights.
• Consent: For marketing activities or non-essential cookies.

 

4. Obtaining Consent

Where consent is required, we will request it explicitly in a written statement or via electronic means. Consent must be freely given and not a condition for a contract unless necessary for that service.

 

5. Types of Personal Data We Collect

• We collect information that enables your identification:
• General Data: Name, address, phone number, and email.
• Sensitive Data: We do not collect data regarding race, religion, or health without your explicit consent unless permitted by Section 26 of the Act.

 

6. How We Use Personal Data

• We use your data for purposes notified to you, such as:
• Identification and verification for our services.
• Processing billing, payments, and credit-related activities.
• Complying with regulatory requirements in Thailand.

 

7. How We Manage Disclosure of Personal Data

We may disclose your data to third parties (e.g., government agencies or service providers) to fulfill our services. Fresh consent will be sought if the purpose of disclosure changes significantly.

 

8. How We Handle Request for Withdrawal of Consent

You may withdraw your consent at any time as easily as it was given. We will notify you of any consequences, such as the inability to continue providing certain services.

 

9. How We Ensure the Accuracy of Personal Data

We take reasonable steps to ensure your data remains accurate, complete, and not misleading. Please notify us of any changes to your contact information.

 

10. How We Protect Personal Data

We implement appropriate administrative, physical, and technical security measures to prevent unauthorized access or loss of data. These measures are reviewed regularly to align with technological changes.

 

11. How We Retain Personal Data

Data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with Thai law. We will securely destroy or anonymize data once the retention period ends.

 

12. Rights of the Data Subject

• Under the Thai PDPA, you have expanded rights:
• Right to Access: Request a copy of your personal data.
• Right to Data Portability: Request your data in a machine-readable format.
• Right to Object: Object to processing for direct marketing or legitimate interests.
• Right to Erasure: Request the deletion of data when it is no longer necessary.

 

13. How We Manage the Transfer of Personal Data

If we transfer data to a foreign country, we ensure the destination has adequate data protection standards. If the destination is inadequate, we will rely on your consent or other legal exemptions.

 

14. Use of Cookies

We use cookies to recognize you and keep track of your preferences. Non-essential cookies will only be deployed upon your affirmative consent via our cookie banner.

 

15. Contacting Us

You may contact our Managing Director regarding any inquiries or to exercise your rights:

Email: benjamas@gaagrp.co.th

 

 

Effective Date: 15 Jan 2026
Updated On: 15 Jan 2026