This terms and conditions of use (hereinafter referred to as the “Terms and Conditions” or “Agreement”) defines the conditions between Airports of Thailand Public Company Limited (AOT) (hereinafter referred to as the “AOT”) and users (hereinafter referred to as the “User” or “you”) in regard to the use of Sawasdee by AOT Application which developed by GFIN-SKY Consortium, under the scope and purpose determined by AOT. Please read this carefully before installing the Sawasdee by AOT Application (hereinafter refer as the “Application”). By using the Application or registering an account, you indicate acceptance of these Terms and Conditions set out herein. If you do not accept these terms, you should not install or use the Application.
AOT may close, suspend, or limit a User’s access to his/her account and/or the services if he/she violates the Terms and Conditions, including the policies or any other agreement which is entered into between the User and AOT.
The User is solely responsible for understanding and complying with any and all laws, rules and regulations of his/her specific jurisdiction that may be applicable in connection with his/her use of the Application, including but not limited to, those related to export or import activities, taxes or foreign currency transactions.
AOT reserves the right to modify, vary and change the Terms and Conditions or its policies relating to the Application at any time as it deems fit. Such modifications, variations and or changes to the Terms and Conditions or its policies relating to the Application shall be effective upon the posting of an updated version. You agree that it shall be your responsibility to review the Terms and Conditions regularly whereupon the continued use of the Service after any such changes, whether or not reviewed by you, shall constitute your consent and acceptance to such changes.
Sawasdee by AOT Application
By using the Application, you expressly represent and warrant that you are legally entitled to accept and agree to the Terms and Conditions. By registering an account, you acknowledge and agree that you are at least sixteen (16) years old and not persons that are forbidden for any reason whatsoever to enter into a contractual relationship. By using the Application, you further represent and warrant that you have the right, authority and capacity to use the Application and to abide by the Terms and Conditions. You further confirm that all the information which you provide shall be true and accurate. Your use of the Application is for your own sole, personal use. You undertake not to authorize others to use your identity or user status, and you may not assign or otherwise transfer your user account to any other person or entity. When using the Application, you agree to comply with all applicable laws while using the Application.
You may only access the Application using authorized means. It is your responsibility to check and ensure that you have downloaded the correct version of the Application for your device. AOT is not liable if you do not have a compatible device or if you have downloaded the wrong version of the Application to your device. AOT reserves the right not to permit you to use the Application with an incompatible or unauthorized device or for purposes other than which the Application is intended to be used.
By using the Application, you agree that:
You will only use the Application for lawful purposes;
You will only use the Application for the purpose for which it is intended to be used;
You will not use the Application for sending or storing any unlawful material or for fraudulent purposes;
You will not use the Application to cause nuisance, annoyance, inconvenience or make fraudulent transactions;
You will not use the Application for purposes other than obtaining services;
You shall not intentionally or unintentionally cause or attempt to cause damage to the merchants and third-party service providers;
You will not try to harm the Application in any way whatsoever;
You will not copy, or distribute the Application or other content without written permission from AOT;
You will only use the Application for your own use and will not resell it to a third- party;
You will keep secure and confidential your account password or any identification we provide you which allows access to your account;
You will provide AOT with proof of identity as it may reasonably request or require;
You agree to provide accurate, current and complete information as required for the services and undertake the responsibility to maintain and update your information in a timely manner to keep it accurate, current and complete at all times during the term of this Agreement. You agree that AOT may rely on your information as accurate, current and complete. You acknowledge that if your information is untrue, inaccurate, not current or incomplete in any respect, AOT has the right but not the obligation to terminate this Agreement and your use of the Application at any time with or without notice;
You will only use an access point or data account which you are authorized to use;
You shall not employ any means to defraud AOT or enrich yourself, through any means, whether fraudulent or otherwise, through any event, promotion or campaign launched by AOT and its affiliates to encourage new usage of the Application by new or existing Users;
You shall not impair or circumvent the proper operation of the network which the Application operates on;
You agree that the Application is provided on a commercially reasonable effort basis; and
You agree that your use of the Application will be subject to the Application’s Privacy Policy as may be amended from time to time.
You agree to assume full responsibility and liability for all loss or damage suffered by yourself, the third-party service provider, AOT or any third party as a result of any breach of the Terms and Conditions.
You agree that all information and guides, provided in the Application, such as flight information, airport maps or directory, are for informative purpose only. AOT, its affiliates, business partners, third-party merchants, and third-party service providers assume no legal responsibility or liability for all loss or damage you may suffer from using information and guides on the Application.
You agree that any service, provided by third-party service providers or merchants, may subject to different terms and conditions and privacy policy, corresponding to the particular service provider or merchant.
AOT Point Loyalty Program
Membership
By registering an account in the Application and completing your identity verification, you will automatically be a member of the loyalty program named “AOT Point”, operated by Airports of Thailand Public Company Limited (AOT) and/or its affiliates.
By becoming a member of loyalty program, you will gain access to services, e-vouchers, promotions and privileges, offered by AOT and/or third-party merchants/service providers as shown in the Application.
All members are required to complete identity verification. Noted that some services may require you to perform identity verification using registered phone number.
AOT has the right to suspend your membership where it reasonably believes that the activity may be fraudulent, illegal or involves any criminal activity or where AOT reasonably believes you to be in breach of the Terms and Conditions.
Earning Points
The Application may, at its sole and absolute discretion, issue you 1 AOT Point (“Point”) for every THB25 that you actually spend on selected services and merchants within 6 airports operated by AOT (Suvarnabhumi Airport, Don Mueang International Airport, Chiang Mai International Airport, Hat Yai International Airport, Phuket International Airport, and Mae Fah Luang-Chiang Rai International Airport). The amount deducted by any discount/promotion/privilege and AOT Point Burn are excluded from the Point calculation.
The Application may, at its sole and absolute discretion, award you Point for transaction that you actually spend at selected merchants or partners of AOT outside airports. The rate of Point to be awarded is determined solely by selected merchants or partners. The amount deducted by any discount/promotion/privilege and AOT Point Burn are excluded from the Point calculation.
The Points are calculated on a per transaction basis and rounded down to the nearest whole number. For instance, if you spent THB75 at Suvanabhumi Airport, the Application may, at its sole and absolute discretion, issue you 3 Points but if you spent THB70 at Suvanabhumi Airport, the Application may, at its sole and absolute discretion, issue you 2 Points.
In case of payment in any foreign currency, the Points will be calculated according to the value of the product/service in THB. For instance, if you spend USD3.50 for a service priced at THB100, the Application may, at its sole and absolute discretion, issue you 4 points.
The Points are issued automatically for any transactions paid via Sawasdee Pay or any payment channel on the Application.
The Application may, at its sole and absolute discretion, award you Point for your participation in marketing activities, organized by AOT, its affiliates or third-party merchants. The rate of Points to be awarded is determined solely by the organizer of the activity.
Point Validity
AOT Point will expire after 2 calendar years on every 31st of December at 23.59 (excluding the current year)
You may retain your valid Points as long as your account remains activated. In case of deactivation/deletion of your account, your Points will be expired at the date of your notification of the deactivation/deletion.
In case of void or refund of payment transactions, all Points that have been previously awarded from the payment will be deducted from your account.
Points cannot be purchased, resold or transferred, for value or otherwise, under any circumstances.
Points can only be redeemed for discount exclusively via Sawasdee Pay or other payment channels on the Application to eligible merchants and service providers. Under any other circumstances, Points have no cash or monetary value, are not redeemable for cash in any form, and Points shall not be regarded, construed, or used as valuable or exchangeable instruments.
Points cannot be transferred to/from any other accounts of the Application, under any circumstances.
Point Redemption
If you comply with all the Terms and Conditions and have the required number of AOT Points, you may select and redeem applicable vouchers via the Application. Your redemption is subject to the additional terms and conditions of AOT or the third-party merchant (as the case may be) that offers the particular voucher that you wish to redeem.
Vouchers are not redeemable for cash nor are they exchangeable for other vouchers under any circumstances. They cannot be resold, exchanged or transferred for value under any circumstances. Vouchers shall not be regarded, construed, or used as valuable or exchangeable instruments under any circumstances.
Points that you have successfully redeemed for a voucher cannot be exchangeable for another voucher under any circumstances. No requests for exchange of voucher will be entertained.
AOT may, at its sole and absolute discretion, reject your request to redeem Points for any reason whatsoever, including without limitation, where there are insufficient Points to redeem for the particular voucher, or where the voucher is no longer made available or out-of-stock by the third-party merchant, or where the Points you wish to use for redemption of vouchers have been issued to you in error etc.
You may redeem your Points via Sawasdee Pay (“AOT Point Burn”). Every 10 AOT Points can be redeemed as a discount of THB1 only when used at eligible merchants and service providers. You may choose the number of Points to be redeem and pay for the remaining balance. You may use Sawasdee Pay to pay for the remaining balance after the discount. For instance, you redeemed 1,000 Points (a THB100 discount) for a product priced at THB100, therefore you do not need to pay anything. In another case, you redeemed 250 Points (a THB25 discount) for a product priced at THB100, therefore you need to pay the remaining balance of THB75 to the merchant using Sawasdee Pay.
All redemptions are non-refundable. Redemptions cannot be refunded for Points or cash under any circumstances. No requests for refund of voucher/discount from AOT Point Burn program will be entertained.
You may check your Points balance and redemptions made in the Application. Your Points balance and redemptions as set out in the Application shall serve as conclusive evidence of the same.
Point Conversion
You may convert points from selected partners’ loyalty programs to AOT Points via the Application. Conversion rate and service fees will be displayed prior the conversion.
AOT Points can be converted to point of selected partners’ loyalty programs via the Application. Conversion rate and service fees will be displayed prior the conversion. Noted that some partners may not accept the conversion from AOT Points.
Point conversion service may require your personal information, such as Thai Citizen ID, passport number, membership ID, phone number, or email, to verify your identity with partners’ loyalty program and prevent activities that might indicate fraudulent or illegal activity or involves any criminal activity, or where partners are no longer in business, or where partners, you wish to convert points to/from, have ceased the point conversion agreement with AOT.
Conversion rate and service fees are determined solely by the agreement with each partner and subject to change without prior notice.
AOT may, at its sole and absolute discretion, reject your request to convert Points for what any reason whatsoever, including without limitation, where there are activities that might indicate fraudulent or illegal activity or involves any criminal activity, or where partners are no longer in business, or where partners, you wish to convert points to/from, have ceased the point conversion agreement with AOT.
General
To the extent as permitted by applicable laws, AOT reserves the right at any time to:
vary, modify or amend the terms and conditions of the AOT Point Loyalty Program (including adding or deleting any terms);
terminate or modify the AOT Point Loyalty Program;
revoke, adjust and/or recalculate any Points awarded;
change the number of Points required for redemption of specific vouchers or substitute any voucher with another of a similar value;
change the number of Points that can be earned on spending on merchants and services;
modify the qualifications and eligibility for earning Points;
modify the activities that earn Points;
modify the methods used to calculate the number of Points to be awarded;
withhold or cease the awarding of Points to you;
without prior notice to you and at its sole discretion.
AOT may suspend the calculation and accrual of Points to rectify any errors in calculation or adjust the calculation as it reasonably deems fit without giving you prior notice or reason.
You shall be responsible for any taxes, levies or duties that arise in connection with the issuance of Points to you, your redemption of Points and/or the utilization of vouchers you have redeemed and all costs and expenses relating to the same shall be borne by you.
Reservations & Payments
You may choose to pay to eligible merchants and service providers by Points and/or Sawasdee Pay. Noted that some merchants are required to pay by credit/debit card only.
You are required to verify your identity and activate the Sawasdee Pay before completing any payment transaction via Sawasdee Pay.
Once you have made a reservation via the Application, you are required to make payment in full to the third-party service provider and your payment will be deducted automatically. Refund and cancellation are subjected to the third-party service provider’s policy. If you have any complaints in relation to the service provided, then that dispute must be taken up with the third-party service provider.
You may use any eligible privileges/vouchers/discounts before the transaction is processed. The final amount of payment, after deductions from privileges/vouchers/discounts, will be shown before you check out. Once the transaction has been processed, you cannot use any privileges/vouchers/discounts on that transaction.
At the participated retail stores, you may make payment with Sawasdee Pay by showing a QR code to the cashier and completing your payment within the Application.
In the event your payment is processed overseas, you will be liable for any additional charges in relation thereto.
AOT has the right to suspend the processing of any transaction where it reasonably believes that the transaction may be fraudulent, illegal or involves any criminal activity or where AOT reasonably believes you to be in breach of the Terms and Conditions.
You agree that you will cooperate in relation to any financial crime screening that is required and to assist AOT in complying with any prevailing laws or regulations in place.
In the event that you choose to pay by credit/debit card, you will need to register a valid credit/debit card which belongs to you in accordance with the instructions within the Application.
You agree that we may verify and authorize your credit/debit card details with third-party service providers when you first register the credit/debit card with us.
If the credit/debit card belongs to another person, such as your parents, you hereby warrant and agree that you have obtained their permission to use the credit/debit card for the payment.
You shall be responsible to resolve any disputes with your credit/debit card company or your payment company on your own.
Intellectual Property Ownership
AOT and its licensors, where applicable, shall own all rights, titles and interests, including all related intellectual property rights, in and to the Application and any suggestions, ideas, enhancement requests, feedback, recommendations or other information provided by you or any other party relating to the Application. The Terms and Conditions do not constitute a sale agreement and do not convey to you any rights of ownership in or related to the Application, or any intellectual property rights owned by the AOT and/or its licensors. AOT’s name, the AOT’s logo, and/or the Application and the third-party service providers’ logos and the product names associated with the Application are trademarks of AOT or third parties, and no right or license is granted to use them. For the avoidance of doubt, the term the Application herein shall include its respective components, processes and design in its entirety.
Contact Us
Airports of Thailand Public Company Limited
333 Cherdwutagard Road, Srikan, Don Mueang, Bangkok 10210, Thailand
Tel.: 0 2535 1192
Fax: 0 2535 3864, 0 2535 5685
AOT Contact Center 1722
Website: www.airportthai.co.th
E-mail: aotpr@airportthai.co.th
SAWASDEE by AOT Website’s Privacy Policy Latest updated: 1/12/2022
Abstract
Sawasdee by AOT Website processes personal data of Visitors of Sawasdee by AOT Website with the reasonable measures to act in compliance with the Thailand’s Personal Data Protection Act B.E. 2562 (“PDPA”). You can see our full detailed Privacy Policy further below. However, the summary of our Privacy Policy is shown below.
What data do we process?
We process collected personal data including but not limited to Identity Data, Address / Contact, and IT Data.
How do we use those data?
We process personal data according to the purpose and scope of Airports of Thailand Public Company Limited and GFIN-SKY Consortium, and with the legal bases as explained in our Privacy Policy.
Who do we transfer information to?
In some circumstances, we may be required to transfer personal data to Third-Party Organizations, which are stated in our vendors/partners list.
What are your rights as a data subject?
As a data subject, you are entitled to the data subject rights which include but not limited to right to access, right to rectification and right to erasure.
Purpose and scope
This Privacy Policy applies to all Sawasdee by AOT Website Visitors (“Visitors”). GFIN-SKY Consortium acts as the Data Processor, who has the role and responsibility in processing and ensuring the security and privacy of all personal data in accordance with Personal Data Protection Act B.E. 2562 (“PDPA”), under the scope and purpose determined by Airports of Thailand Public Company Limited as the Data Controller.
Data Controller Contact Information
Airports of Thailand Public Company Limited 333 Cherdwutagard Road, Srikan, Don Mueang, Bangkok 10210, Thailand
This Privacy Policy covers data subjects who are SAWASDEE by AOT Website Visitors, including Airline Passengers, Airport Visitors, Airport Staff.
As used in this Privacy Policy, the following terms shall have the meanings set forth below:
‘Processing’ means anything done with SAWASDEE by AOT Website Visitors’ personal data, including collection, storage, use, disclosure, and deletion.
‘Legal Bases’ means justifiable reasons to process personal data in accordance with Article 24 and Article 26 of PDPA.
This policy may be revised at any given time as notified to Personnel through appropriate channels.
What personal data do we process?
SAWASDEE by AOT Website stores the following Visitors’ personal data :
Identity Data including but not limited to Full name
Contact Data including but not limited to Phone number and Email
IT Data including but not limited to the Cookie ID
How do we collect your personal data?
In general, SAWASDEE by AOT Website will directly collect Visitors’ personal data through these processes (or channels) including but not limited to:
Collecting cookie ID from your visit to SAWASDEE by AOT Website (see cookies policy for details)
Fill in the form on the website.
How does SAWASDEE by AOT Website use your Personal Data?
As the data processor, GFIN-SKY Consortium uses Visitors’ personal data to carry out tasks per Airports of Thailand Public Company Limited’s scope and purpose of providing group of activities, including but not limited to:
Group of Activities
Group of PIIs
Legal Bases
Contact Us
Contact Data
Identity Data
IT Data
Contract
Become a Partner
Contact Data
Identity Data
IT Data
Contract
Visitor Activity Report
Profile Data
IT Data
Contract
SAWASDEE by AOT Website will process Visitors’ personal data according to the stated purposes and scope. If there came upon a case where personal data were to be processed for other purposes unclarified above, SAWASDEE by AOT Website would ask for new consent to process Visitors’ personal data on such uses.
Usage of Personal Data with External
Third-party Organization
SAWASDEE by AOT Website may be required to pass on personal data to external third-party organizations and process personal data in accordance with the contract or the legal obligation of GFIN-SKY Consortium. These organizations may include:
–Google Analytics
For the case where personal data is being passed on the external third-party organizations, SAWASDEE by AOT Website will ensure that the minimum amount of personal data is being sent and consider anonymization and pseudonymization techniques for greater security. Nevertheless, external third-party organizations who will process Visitors’ personal data for SAWASDEE by AOT Website will be required to have an appropriate privacy policy. SAWASDEE by AOT Website does not permit these external third-party organizations to use the Visitors’ personal data in a way that diverge from the agreed scope and purpose.
Transferring Personal Data to Foreign Countries
SAWASDEE by AOT Website may be required to pass on personal data to foreign countries, including, but not limited to
United States
For these cases, SAWASDEE by AOT Website will pass on Users’ personal data only when these requirements have been met. These include:
Receiving foreign country has a substantial personal data regulation in place
Receiving organization has a substantial privacy policy in place and certified by the Personal Data Committee
Receiving organization is obligated to follow a substantial privacy policy with a sufficient remedial measure in accordance with the procedures identified by the Personal Data Committee (including, but not limited to, standard contract, vendor process agreement)
A necessary task to exercise legal rights
Consent has been received from appropriate individuals agreeing to the pass on of Users’ personal data to a foreign country that does not have a substantial privacy policy
A necessary task to carry out contractual agreements of the Users
A necessary task to carry out under a contractual agreement between two entities for the benefit of the Users
To ensure the safety or limit further damage to an individual’s health who cannot give consent at the current time
A necessary task for the good of the public
Security Measures for Personal Data Protection
SAWASDEE by AOT Website has implemented security measures to ensure the security of Visitors’ personal data. External third-party organizations must carry out the processing of personal data in accordance with AOT’s policy and agrees to ensure the security of Visitors’ personal data (More details are available at www.airportthai.co.th/privacy-policy
Time Period of Personal Data Storage
SAWASDEE by AOT Website will store Visitors’ personal data throughout for the appropriate period according to SAWASDEE by AOT Website’s scope and purpose including other important matters such as legal requirements, financing, and auditing purposes. (www.airportthai.co.th/privacy-policy)
Website Visitors’ Personal Data Rights
Your personal data rights include:
Right of Access – you have the right to request a copy of all your personal data and assess if the company is processing your personal data in accordance with the law or not
Right to Data Portability – for the case where a company has an automated platform allowing you to access your personal data automatically:
You have the right to ask for your personal data to be transferred automatically to other organizations
You have the right to ask for your personal data to be directly transferred to other organization, with the exceptions of cases where there is a technological limitation
Right to Object – you have the right to object to any data process activity of your personal data for the legal bases, including:
Public Task or Legitimate Interest
Direct Marketing Purposes
Right to Erasure – you have the right to request data deletion or anonymization, in accordance to the following cases:
Expiration of data processing required terms
Consent has been withheld
Objections raised on the data processing activity
The processing activity is not in accordance with the law
Right to restrict processing – you have the rights to restrict any data processing activities, in accordance with the following cases:
During the process of personal data assessment as requested
For cases related to personal data which has initially asked for deletion and erasure but was followed by an additional request of processing restriction instead
For cases when the data processing terms have passed, but you have requested for processing restriction due to legal reasons
During the process of personal data processing objection verification
Right to Rectification – You have the right to edit your personal data to be correct and concurrent to the present. If any mistake was detected, the company might not edit this themselves.
In the cases where SAWASDEE by AOT Website may not be able to carry out and exercise your rights, including, but not limited to, the cases where a legal process is taking place, you will continue to have the rights to retract your consent by emailing to all related parties. SAWASDEE by AOT Website will be required to terminate all processes as soon as possible. However, the retraction only is carried out to all data processing after the retraction. Any data process activity carried out before the retraction will not be reversed.
In the case where you have the intention to exercise your personal data protection rights, please contact AOT Contact Center 1722 or (+66) 2535 1192. SAWASDEE by AOT Website will process this request in a secure and timely manner. Also, in case that SAWASDEE by AOT Website fails to preserve your rights under PDPA, you can file complaint to Office of the Personal Data Protection Commission (‘PDPC’)
Policy Revision
This Privacy Policy applies to all SAWASDEE by AOT Website Visitors and was last updated on 1st December 2022. GFIN-SKY Consortium holds the rights to review and edit the policy as the company sees fit. Any revision made will be notified to all related parties regarding the changes in data processing activity procedures.
SAWASDEE by AOT Website Cookies Policy
When you visit the SAWASDEE by AOT website, the relevant information of your access to this website will be stored in the cookie format. This cookies policy explains the meaning, function, delete and reject cookies for your privacy. By accessing this website, you permit us to use cookies as follows:
What are Cookies
Cookies are small text files that are placed on your computer and/or communication tool such as smartphones, tablets, etc. through a web browser when you visit our website without harming your computer and/or communication tools.
We use the necessary cookies to enhance your online experience. Cookies will collect your personal data: standard internet log, visitor behavior information and preferences to verify your language identity, your security data and personal interest in products and services. Also, to measure the amount of access to online services, remember your preferences, or for advertising and public relations purposes.
How do we use Cookies
We use Cookies in a range of ways to make our website works efficiently and improve your experience on our website, including:
Remembering your settings from your last visit
Understanding how you use our website;
Understanding your behavior and interest in products or services offered in our website;
In some cases, we need a third party to use IP addresses and cookies for statistical analysis and data linking.
What type of Cookies we use:
Necessary Cookies
:
These cookies are used for our website’s work in order to specify display status in our website.
Analytics / Performance
Cookies [Optional]
:
These cookies are used for our website in order to acknowledge and keep statistics and behavior of web surfing.
Functionality Cookies
[Optional]
:
These cookies are used for our website in order to remember re-visiting the website and also not to show popup of system notification.
Cookies
Type
Period
Purpose
1. lang_name
Functionality
30 days
Remembering language name e.g., English, Thai
2. lang_code
Functionality
30 days
Remembering language code e.g., EN, TH
3. cookie_accept
Necessary
30 days
Collecting consent on cookies on AOT Microsite
4. site_code
Functionality
30 days
Collecting airport code e.g., BKK, DMK, CNX
5. site_name
Functionality
30 days
Collecting airport name e.g., Suvarnabhumi
6. google tag manager
Analytics / Performance
30 days
Website statistics using Google Analytics
How can you manage Cookies
You can delete or reject cookies that are set by our website, through your web browser setting by how to delete cookies from each web browser that you are using, for example, Chrome, Firefox, Internet Explorer and Safari, etc.
Storage Method
We will store your data derived for cookies as follows:
Type of storage: we keep your data in electronic means
Storage location:
For cookies in [1-5], we keep in your browser
For cookies in [6], we keep in Google Analytics’ cloud servers
Period of storage: please see in “What type of Cookies we use”
Policy Revision
This Cookie Policy may be revised as appropriate and comply with regulations. Any revision made will be announced at [*URL cookie policy*]
This announcement is posted on 1st December 2022 and effective from 15th December 2022.
Sawasdee by AOT App Users’ Privacy Policy (Sawasdee by AOT Privacy Policy)
Latest updated: 7/6/2022
Abstract
Sawasdee by AOT Application processes personal data of Users of Sawasdee by AOT Application with the reasonable measures to act in compliance with the Thailand’s Personal Data Protection Act B.E. 2562 (“PDPA”). You can see our full detailed Privacy Policy through the attached QR code. However, the summary of our Privacy Policy is shown below.
What data do we process?
We process collected personal data including but not limited to ID Data, Identity Data, Address / Contact, Financial Data, Profile Data, IT Data.
How do we use those data?
We process personal data according to the purpose and scope of Airports of Thailand Public Company Limited, with the legal bases as explained in our Privacy Policy.
Who do we transfer information to?
In some circumstances, we may be required to transfer personal data to third-party organizations, which are stated in our vendors/partners list.
What are your rights as a data subject?
As a data subject, you are entitled to the data subject rights which include but not limited to right to access, right to rectification and right to erasure.
1. Purpose and Scope
This Privacy Policy applies to all Sawasdee by AOT Application Users. GFIN-SKY Consortium acts as the Data Processor, who has the role and responsibility in processing and ensuring the security and privacy of all personal data in accordance with Personal Data Protection Act B.E. 2562 (“PDPA”), under the scope and purpose determined by Airports of Thailand Public Company Limited as the Data Controller.
Data Controller Contact Information
Airports of Thailand Public Company Limited 333 Cherdwutagard Road, Srikan, Don Mueang, Bangkok 10210, Thailand
This Privacy Policy covers data subjects who are Sawasdee by AOT Application Users, including Sawasdee by AOT Application members, PT Max Card members, bank customers.
As used in this Privacy Policy, the following terms shall have the meanings set forth below:
‘Processing’ means anything done with Sawasdee by AOT Application Users’ personal data, including but not limited to collection, storage, use, disclosure, and deletion.
‘Legal Bases’ means justifiable reasons to process personal data in accordance with Article 24 and Article 26 of PDPA.
‘Anonymization’ means the process of creating anonymous information, namely information which does not relate to an identified or identifiable natural person or to personal data rendered anonymous in such a manner that the data subject is not or no longer identifiable. (GDPR, Recital 26)
‘Pseudonymization’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person. (GDPR, Article 4 (5))
This policy may be revised to reflect our service/business or any significant change. Users will be notified through appropriate channels.
2. What Personal Data Do We Process?
Sawasdee by AOT Application processes these groups of personal data specified hereunder.
ID Data including but not limited to Identification number, Passport number
Identity Data including but not limited to Full name, Name title (excluding biometric data)
Address / Contact including but not limited to Email, Phone number, Address
Profile Data including but not limited to Sex, Country of residence
IT Data including but not limited to GPS location, User ID, Transaction ID
Financial Data including but not limited to Credit card detail, Transaction details
Property Data including but not limited to Lost property detail
3. How Do We Collect Your Personal Data?
In general, Sawasdee by AOT Application will directly collect Users’ personal data through these processes (or channels) including but not limited to online forms on Sawasdee by AOT Application.
However, Company may collect additional data through third-party organizations which include
2C2P (Thailand) Company Limited Group of PIIs: Identity Data, Financial Data, IIT Data Group of Activities: Payment features
Krungthai Bank Public Company Limited Group of PIIs: Identity Data, Financial Data, IIT Data Group of Activities: Payment features, Payment QR, Payment Transaction Monitoring
4. How Does Sawasdee by AOT Application Use Your Personal Data?
As the data processor, Sawasdee by AOT Application uses Users’ personal data to carry out tasks, operated by GFIN-SKY Consortium per Airports of Thailand Public Company Limited’s scope and purpose of providing group of activities, including but not limited to:
Account Creation Group of PIIs: Address / Contact, Identity Data, Profile Data, IT Data Legal Bases: Contract, Consent
AOT Point Reward Group of PIIs: Identity Data, Financial Data, IT Data, Address / Contact, Profile Data Legal Bases: Contract, Consent
Application Usage Analytic Group of PIIs: Profile Data, IT Data Legal Bases: Legitimate Interests, Consent
Campaign Report Group of PIIs: Financial Data Legal Bases: Contract
Customer Support Group of PIIs: Identity Data, Address / Contact Legal Bases: Contract
Flight & Baggage Notification Group of PIIs: Profile Data, IT Data Legal Bases: Contract
GPS Detection Group of PIIs: IT Data Legal Bases: Contract
Home-to-Gate Navigation Group of PIIs: IT Data Legal Bases: Contract
Log Group of PIIs: IT Data, Financial Data Legal Bases: Legitimate Interests
Lost & Found Group of PIIs: Identity Data, ID Data, Address / Contact, Property Data Legal Bases: Contract, Public Task
Network Performance Monitoring Group of PIIs: IT Data Legal Bases: Legitimate Interests
Newsletter and Promotion Group of PIIs: Identity Data, Address / Contact Legal Bases: Consent
Payment Features Group of PIIs: IT Data, Financial Data Legal Bases: Contract
Payment QR Group of PIIs: Identity Data, Financial Data, IT Data Legal Bases: Contract
Payment Transaction Monitoring Group of PIIs: Identity Data, Financial Data, IT Data Legal Bases: Legal Obligation, Legitimate Interests
Point Report Group of PIIs: Identity Data, Financial Data, IT Data Legal Bases: Legitimate Interests
Point Transfer Group of PIIs: IT Data, Address / Contact, Financial Data, ID Data Legal Bases: Contract
Point Transfer (Manual) Group of PIIs: Identity Data, Address / Contact, Financial Data Legal Bases: Contract
Privilege Redeem and Voucher Usage Report Group of PIIs: Identity Data, Financial Data, IT Data Legal Bases: Contract
Privilege Report Group of PIIs: Identity Data, Financial Data, IT Data Legal Bases: Legitimate Interests
Promotion Code Report Group of PIIs: Identity Data, Financial Data, IT Data Legal Bases: Legitimate Interests
Reservation Report Group of PIIs: Identity Data, Financial Data, IT Data Legal Bases: Legitimate Interests
Service Reservation Group of PIIs: Address / Contact, Identity Data, Profile Data, Financial Data, IT Data Legal Bases: Contract
SMS Promoting Group of PIIs: Identity Data, Address / Contact, Financial Data Legal Bases: Contract, Consent
Voucher Usage Group of PIIs: Identity Data, Financial Data, IT Data Legal Bases: Contract
Sawasdee by AOT Application will process Users’ personal data according to the stated purposes and scope. If there came upon a case where personal data were to be processed for other purposes unclarified above, Sawasdee by AOT Application would ask for new consent to process Users’ personal data on such uses.
5. Usage of Personal Data with External Third-party Organization
Sawasdee by AOT Application may be required to pass on personal data to external third-party organizations and process personal data in accordance with the contract or the legal obligation of Sawasdee by AOT Application. These organizations may include:
Google Firebase
Indoor Atlas
Commercial banks including but not limited to Siam Commercial Bank, Krungthai Bank, Bangkok Bank
For the case where personal data is being passed on the external third-party organizations, Sawasdee by AOT Application will ensure that the minimum amount of personal data is being sent and consider anonymization and pseudonymization techniques for greater security. Nevertheless, external third-party organizations who will process Users’ personal data for Sawasdee by AOT Application will be required to have an appropriate privacy policy. Sawasdee by AOT Application does not permit these external third-party organizations to use the Users’ personal data in a way that diverge from the agreed scope and purpose.
6. Transferring Personal Data to Foreign Countries
Sawasdee by AOT Application may be required to pass on personal data to foreign countries, including, but not limited to
Finland Group of Activities: Home-to-Gate Navigation, GPS Detection
United States Group of Activities: Account Creation (OTP via SMS / Email), Application Usage Analytics, Newsletter and Promotion, SMS Promoting
For these cases, Sawasdee by AOT Application will pass on Users’ personal data only when these requirements have been met. These include:
Receiving foreign country has a substantial personal data regulation in place
Receiving organization has a substantial privacy policy in place and certified by the Personal Data Committee
Receiving organization is obligated to follow a substantial privacy policy with a sufficient remedial measure in accordance with the procedures identified by the Personal Data Committee (including, but not limited to, standard contract, vendor process agreement)
A necessary task to exercise legal rights
Consent has been received from appropriate individuals agreeing to the pass on of Users’ personal data to a foreign country that does not have a substantial privacy policy
A necessary task to carry out contractual agreements of the Users
A necessary task to carry out under a contractual agreement between two entities for the benefit of the Users
To ensure the safety or limit further damage to an individual’s health who cannot give consent at the current time
A necessary task for the good of the public
7. Security Measures for Personal Data Protection
Sawasdee by AOT Application has implemented security measures to ensure the security of Users’ personal data. External third-party organizations must carry out the processing of personal data in accordance with Sawasdee by AOT Application’s policy and agrees to ensure the security of Users’ personal data
Sawasdee by AOT Application will store Users’ personal data throughout for the appropriate period according Sawasdee by AOT Application’s scope and purpose including other important matters such as legal requirements, accounting, and auditing purposes.
Right to Withdraw Consent – you have the right to withdraw the consent at any time during which your personal data is held by Sawasdee by AOT Application, unless there is right restriction by law or there is a contract which is beneficial to you which remains valid. The collection, use or disclosure of your personal data which was undertaken before the withdrawal of your consent shall not be affected. However, the withdrawal of your consent related to and required for the service request may prevent Sawasdee by AOT Application from providing services to you, or may cause the transaction or any other related activities to be suspended or temporarily discontinued, or may affect your knowledge of products and / or services, For your own benefit, you should determine and inquire about the potential impacts before deciding to withdraw your consent.
Right of Access – you have the right to request a copy of all your personal data and assess if the company is processing your personal data in accordance with the law or not
Right to Data Portability – for the case where a company has an automated platform allowing you to access your personal data automatically:
You have the right to ask for your personal data to be transferred automatically to other organizations
You have the right to ask for your personal data to be directly transferred to other organization, with the exceptions of cases where there is a technological limitation
Right to Object – you have the right to object to any data process activity of your personal data for the legal bases, including:
Public task or legitimate interest
Direct marketing purposes
Right to Erasure – you have the right to request data deletion or anonymization, in accordance with the following cases:
Expiration of data processing required terms
Consent has been withheld
Objections raised on the data processing activity
The processing activity is not in accordance with the law
Right to restrict processing – you have the rights to restrict any data processing activities, in accordance with the following cases:
During the process of personal data assessment as requested
For cases related to personal data which has initially asked for deletion and erasure but was followed by an additional request of processing restriction instead
For cases when the data processing terms have passed, but you have requested for processing restriction due to legal reasons
During the process of personal data processing objection verification
Right to Rectification – You have the right to edit your personal data to be correct and concurrent to the present. If any mistake was detected, the company might not edit this themselves.
In the cases where Sawasdee by AOT Application may not be able to carry out and exercise your rights, including, but not limited to, the cases where a legal process is taking place, you will continue to have the rights to retract your consent by emailing to all related parties. Sawasdee by AOT Application will be required to terminate all processes as soon as possible. However, the retraction only is carried out to all data processing after the retraction. Any data process activity carried out before the retraction will not be reversed.
In the case where you have the intention to exercise your personal data protection rights, please contact AOT Contact Center 1722 or (+66) 2535 1192. Sawasdee by AOT Application will process this request in a secure and timely manner. Also, in case that Sawasdee by AOT Application fails to preserve your rights under PDPA, you can file complaint to Office of the Personal Data Protection Commission (‘PDPC’)
10. Policy Revision
This Privacy Policy applies to all Sawasdee by AOT Application Users and was last updated on 7/6/2022. Sawasdee by AOT Application holds the rights to review and edit the policy periodically if there is any change in activities or any significant change. Any revision made will be notified to all related parties regarding the changes in data processing activity procedures.
