Privacy Notice

KMITL Learning Intelligence X: KLIX

This privacy notice (the Notice) is provided for the users of KLIX System
(Hereinafter referred to as “Processing Activity”) to know and understand how we collect,
use and disclose (Process) your personal data that is processed by King Mongkut’s
Institute of Technology Ladkrabang (Hereinafter referred to as “the Institute” or “We”)
as the data controller of your personal data that is collected by this processing activity.
We has provided KMITL Learning Intelligence X: KLIX in order to support online
leaning system for general public on the website: klix.kmitl.ac.th. It is a system that
increase the opportunity of education for every age group to improve their proficiency.
The system requires the users to register for the service of the system before being able
to register for the subjects and pay for the tuition fee. KLIX system also collects the data
about attendant, test score, received certificate, answers to questions and conversations
conducted in the classroom, etc. It is to facilitate the online learning and teaching, support
the requests for services provided by the institute, conveniently follow up the request
status e.g., showing personal data, checking the rights of the learner, through one channel
by using one user account.
The personal data of the data subject to be collected, used, and disclosed by us are as
follows:

Lawful basis for processing personal data
We collect your personal data under the following lawful basis.
(1.1) Consent
In certain cases, when you give us your consent, we may collect, use, or disclose
your personal data to improve services related to education or management under the
operation of the institute.

(1.1) Legitimate Interest
In certain cases, we may collect, use, or disclose for legitimate interest of the
institute.
(1.2) Public Task
In certain cases, we may collect, use, or disclose to perform its tasks on public
interest or use the state power that is delegated to the institute.
(1.3) Legal Obligation
In certain cases, we may collect, use, or disclose to comply with the law that is
currently operable and that will be amended in the future.

Purposes of the collection of your personal data
We collect your personal data for the following purposes.
(2.1) To recruit and consider the qualified applicants for the training courses
provided by the institute or its affiliates that the applicant enrolls in and/or enrolls in
via provided channels
(2.2) To prepare announcements of name list or documents for introducing
courses provided by the institute or its affiliates and, then, distribute them to the
leaners of the courses
(2.3) To prepare the name list and the brief biography of the lecturers of each
course and distribute them to the learners
(2.4) To process and prepare grade records of each courses provided by the
institute or its affiliates
(2.5) To prepare and distribute the video clips about the training for the learners
to review
(2.6) To claim expenses for the registration fee of the training and the lecturer’s
remuneration
(2.7) To maintain contact and inform news to the learners
(2.8) To provide medias for public relations in order to promote the courses
provided by the institute. There may be the learners or lecturers that are revealed in
some parts of the medias.
(2.9) To manage the training courses or other activities provided by the institute
(2.10) To maintain security of the buildings or the venues of the trainings
Personal data that are collected and used
For the purposes with regard to Clause 2, the type of your personal data that we
collect shall include:

(3.1) The source and list of your personal data that are collected are as follows.

(3.2) The purposes of using your person

Disclosure of your personal data
(4.1) Your personal data will be disclosed to public for the purpose of public relations on
the websites: https://oaq.kmitl.ac.th, and
https://ktbfastpay.ktb.co.th/KTB/eng/payment/payForm.jsp; and Facebook accounts: KMITL, KLIX,
and KMITL Online Teaching and Learning Service.
Retention period of personal data
We will retain your personal data according to the specific periods of time as
follows.
(1 ) Your personal data will be kept for a period of time required by the law
concerning the retention period of personal data.
(2) In case that there is no specific retention period of personal data required by
the law, we will prescribe the retention period that is appropriate and necessary for the
operation by the institute.
When the retention period expires, we will delete, destroy, or anonymize your
personal data.
Rights of the data subject
The data subject has the rights as follows:
(6.1) Right to be notified
We will inform you “Privacy Notice” that clearly state the purposes of
collection, use, and disclose your personal data.
(6.2) Right to access to the personal data
You have the right to access and obtain for a copy of your personal data holding
by us. You also have the right to request for disclosure of your personal data that we
collect without your consent.
(6.3) Right to require rectification
You have the right to rectify your inaccurate personal data, outdate personal
data, misleading personal data, or incomplete personal data.
(6.4) Right to transfer the personal data
In case that our data system is supports for reading or use on other tools or
automatic devices and able to automatically use or disclose personal data, you have
the right to obtain a copy of your personal data. You also have the right to request for
transferring the data to another data controller automatically and obtain a copy of your
transferred personal data.
(6.5) Right to withdraw the consent
You have the right to withdraw your consent for personal data processing that
has been given to us at any time. However, the withdrawal of consent will not affect
the personal data processing that you have legally given consent.

(6.6) Right to object personal data processing
You have the right to object the processing of your personal data, unless we
have legitimate grounds to reject your request (e.g. we have compelling legitimate
ground to collect, or for legal establishment of right of claim, complying with or
exercising the right of claim, or public interest according to the mission of the institute.)
(6.7) Right to suspend the use of personal data
You have the right to suspend the use of your personal data while waiting for
your personal data to be validated as per your request for rectification, or request for
suspension instead of deleting your personal data, or while waiting for the proof by us in
order to reject your objection.
(6.8) Right to erase the personal data
You have the right to request us to delete or destroy your personal data, if it is
un necessary to be kept according to the purposes of personal data processing; or in
case that you have withdrawn your consent and we no longer have the authority to
process your personal data; or in case that you exercise your rights to object your
personal data processing and we cannot claim to reject the objection; or in case that
the processing of your personal data is unlawful.
In case that you want to exercise your rights as mentioned previously or
withdraw your consent for processing your personal data that you have given to us; you
can contact us to obtain the request form for exercising your rights as the data subject
or download it from our website.
However, we can reject your request if there are certain circumstances where we
have the legal grounds to do so, or actions on compliance with laws or court decree, or
in case that may affect and cause damage to the right or freedom of the data subject or
other persons. When we reject your request, we will inform you the reasons for the
rejection.

Security of your personal data
We provide internal security measures to properly protect your personal data
from loss, unauthorized or unlawful access, use, change, edit or disclosure of your
personal data.
In case that we give an agency or third-party authority to proceed with the
personal data processing on behalf of us, we require them to follow our security measure
to ensure security of your personal data and protect it from being collected, used, and
disclosed for other unauthorized and unlawful purposes.
Engagement of the data subject
We may disclose your personal data on condition that we receive a request for
disclosure from the data subject, successor, heir, legal representative, or guardian. The
request can be sent to the authorized agency who are responsible for the managing
system of PDPA by e-mail: DPO_KMITL@kmitl.ac.th, and by mail at King Mongkut’s
Institute of Technology Ladkrabang, 1 Chalongkrung Road, Ladkrabang, Bangkok 10520.
In case that the data subject, successor, heir, legal representative, or guardian has
any objections against the collection, correctness, or any actions e.g., a request for
changing your personal data, we will record the objection as evidence.
However, we may reserve the right to reject with regard to Clause 2 in case that it
complies with the law, or your personal data is anonymized.
Responsibility of the personal data processor
We have authorized our certain staff or agency to collect, use, and disclose your
personal data on this processing activity. Only these staff or agency are allowed to access
to your personal data. We also require them to strictly comply with this privacy notice.
Changes to this privacy notice
We may change or update this privacy notice in relation to any changes of your
personal data processing and PDPA or other related laws. We will inform the updated
privacy notice at our website. However, we kindly advise you to check the updated
version of this privacy notice regularly especially before you disclose any of your
personal data to us.
Once you agreed to use any services on this processing activity, you are deemed to
acknowledge the agreements on this privacy notice. However, you are advised to
suspend the use of these services if you do not agree with any aspects on this notice.
On the other hand, if you continue after this notice has been changed or updated and
informed on our website, you are deemed to acknowledge the changes or updates.
How to contact us
You can contact us for more information about PDPA at:
(1) Data Controller

Title: King Mongkut’s Institute of Technology Ladkrabang
Address: 1 Chalongkrung Road, Ladkrabang, Bangkok 10520
Contact number: 0 2329 8000 – 0 2329 8099

(2) Data Protection Officer: DPO

Title: Asst.Prof. Akkaradech Watcharaphuphong
Contact information: E-Mail : DPO_KMITL@kmitl.ac.th