• Data controller means the legal person or the Company who controls and is responsible to collect, use or disclose personal data in paper or electronic files regarding to personal data protection laws
• Allianz Group Companies means Allianz SE, affiliated company and associated company of Allianz SE, including Allianz Ayudhya Group Companies
• Allianz Ayudhya Group Companies means Allianz Ayudhya Assurance Public Company Limited, Allianz Ayudhya General Insurance Public Company Limited, and Allianz Ayudhya Capital Public Company Limited including associated and affiliated company of Allianz Ayudhya Capital Public Company Limited.

• Personal data that the Company obtained from you on applications, forms, or any other documents when you request for our services through all channels, including electronic channels, such as

          o   Basic personal data such as name, surname, title, identification card number, passport number or other identification card number, addresses, gender, phone number or mobile phone number, email address, date of birth, username or marital status;

          o   Financial information such as source of income, credit/debit card number, bank account number, details of premium payment, or tax information;

          o   Employment information such as position, workplace, work experience, name and address of employer. 

• Information of backgrounds/records relating to laws on Anti-Money Laundering, Terrorism and Proliferation of Weapons of Mass Destruction Financing, Bankruptcy or Foreign Account Tax Compliance Act (FATCA);
• Any transactions relating to insurance policy such as premium payment history, insurance policy loan, claim, execution of rights or the use of our services including conversation records from all communication channels of the Company;
• Sensitive personal data such as health data, disabilities, race or ethnicity, genetic data, biometric data, sexual behavior, criminal records, trade union membership, health records, claim history;
• Information on the social media platforms that we receive from other social media providers or from the subscription for our services, usage of our website or application such as My Allianz or Healthy Living;
• IP address, the type of browser software used, and the date, time and duration of your usage of our website or application, where such details are automatically recorded.

If you would like to purchase our products and services, we need you to provide personal data that is necessary, including sensitive personal data in order to offer products or services, to underwrite, to perform our obligations under an existing contract with you, or to meet any of your requests. If you do not wish to provide necessary or sufficient personal data or sensitive personal data to us, we may not be able to perform our obligations under the existing contract with you, or may refuse to act on your requests.

please also be advised that the personal data given to the Company is related to other people (e.g. family member, premium payer or beneficiary), you acknowledge and affirm that you have the authority to act on their behalf regarding the processing of their personal data and provide this Privacy Notice for their acknowledgement.

3.1   The Company obtains your personal data from:

• The Company collects personal data directly from you via your life insurance application, your request submitted to the Company, your interaction with us from all of the Company’s communication channels, and your request to use the Company’s website or applications e.g. My Allianz or your participation in marketing or social responsibility activities.
• We may also obtain your personal data from third parties or public databases, such as Allianz Ayudhya Group Companies or Allianz Group Companies, business partners, financial advisors, insurance intermediaries or brokers, banks, other insurers, your doctors, hospitals, professional associations such as the Thai Life Assurance Association/Thai General Insurance Association, public authorities, regulator, authorities under other applicable laws, employer or financial advisor of employer, and social media providers linked with the Company.

In this regards, the Company may process the personal data for other purposed as specified by laws such as the prevention or suppression of dangers to your life, body or health (vital interest basis) or where the processing is necessary to carried out for the public interest or for the exercise of public power granted to the Company (public task basis);

When you use our products or receive our services, the insurance application you filled out or the insurance policy made with us may have additional conditions related to how we collect, use, disclose, and process your personal data. These will be used in addition to the objectives specified in this privacy notice.

• Public authorities, regulatory bodies, Allianz Group Companies, Allianz Ayudhya Group Companies, other insurers, co-insurers, re-insurers, life insurance intermediaries/brokers, group policyholders, professional associations, and financial institutions;
• Other external contacting parties or service providers e.g. cloud service provider, document management, call center, payment system, information technology, post, marketing research/analysis companies, rating agencies;
• Technical consultants, experts, lawyers, auditors, medical doctors, hospitals, third party claim administration, lost adjustors/surveyors, garages;
• Business partners to send you information for marketing purposes or marketing information as you subscribed in accordance with your communication preferences.
• Business purchase offerer or business transferee, in the event of any contemplated or actual reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stocks (including in any insolvency or similar proceedings)

Whenever we transfer your personal data for processing outside of Thailand by another Allianz Group companies, we will do so on the basis of Allianz’ approved Binding Corporate Rules known as the Allianz Privacy Standard (Allianz’ BCR) which establish adequate protection for personal data.

Allianz’ BCR and the list of Allianz Group Companies that comply with them can be accessed under https://www.allianz.com/en/privacy-statement.html#TabVerticalNegative2523488475

• Access or request a copy of your personal data held about you including disclosure of the acquisition of your personal data;
• Withdraw your consent at any time where your personal data is processed with your consent;
• Update or correct your personal data so that it is always accurate, complete and not misleading;
• Delete, destroy or anonymize your personal data from our records if it is no longer needed for the purposes indicated above;
• Restrict the processing of your personal dataRestrict the processing of your personal data in circumstances where you have contested the accuracy of your personal data;
• Object to the collection, use, and disclosure of your personal data in certain circumstances, including the case where personal data is being processed for direct marketing;
• Obtain your personal data in an electronic format for you or for your new insurers; and
• File a complaint with us and/or the relevant data protection authority if you believe that there is violation of applicable data protection laws.

You may exercise these rights by adjusting your privacy preference settings where you have created an online account with us. You can change privacy preferences by accessing online account and adjusting profile settings, or contacting us as detailed in section 13 below if you need any assistance.

Your withdrawal of any previously given consent, your request to delete, destroy and anonymize your personal data, your request to restrict or your objection to the processing of your personal data could mean that the Company is unable to perform our obligations under an existing contract with you, and that there may be restrictions on certain transactions or services, which may result in the loss of your privilege from the insurance contract or other agreements, and may restrict you from services offered by us.

The Company may refuse to comply with your request in the circumstances where there are legal restrictions, or the Company has compelling legitimate grounds for the processing of your personal data as permitted by applicable laws. The Company reserves the right to charge a reasonable fee to complete your request.

In the circumstance where the Company rejects to underwrite your application for insurance, where you withdraw your application for insurance, or where permitted by law, the Company may retain your personal data to the extent necessary to comply with our legal obligations, such as anti-money laundering, and the establishment, exercise or defense our legal claims.