Policy and Legal Compliance

Personal Data Protection Policy (Privacy Policy)

Bang Somboon Subdistrict MunicipalityGives great importance to protecting citizens' personal information. In accordance with the Personal Data Protection Act 2019 (PDPA), this policy explains how we collect, use and protect your information.

1. Personal information collected

We may collect your personal information when you use the E-Service, contact us, or register through the website, including:

• Personal identification information such as first and last name, national identification number
• Contact information such as address, telephone number, email
• Technical information such as IP Address, browser type, cookie information (Cookies)

2. Purpose of collection

• for use in providing services Receive complaints and consider requests through the E-Service system
• To communicate, notify or respond to your inquiries.
• To use the information to analyze, improve and develop the efficiency of the agency's website and services.
• To comply with laws and regulations of government agencies.

3. Disclosure of personal information

We will not disclose, sell, or trade your personal information to third parties. Except in the following cases:

• have received your express consent
• To comply with a court order, subpoena, or legal process.
• Forward to other relevant government agencies to resolve the issue or proceed with your request.

4. Rights of the owner of personal data

You have the right to request access, request a copy, request correction or request deletion of your personal information in our care. (According to the limitations of laws related to government agencies) If you want to exercise your rights You can contact us at the agency's contact channel.

5. Use of cookies (Cookies)

This website uses cookies to remember your preferences and analyze usage behavior. To provide a better experience You can set your browser to refuse the use of cookies.

Website Security Policy

Bang Somboon Subdistrict MunicipalityStrict website security measures have been established. To prevent information from being accessed, changed or destroyed without permission.

1. Technical Measures

• Data encryption (SSL/TLS): The website supports communication via HTTPS protocol to encrypt data sent between your browser and our servers. Prevent data capture
• Intrusion prevention system (Firewall): Firewall and cyber threat protection systems are installed to filter and block unusual access.
• System updates: Software and database management systems are regularly updated with security patches.

2. Access Control

• Limit access to the website management system (Back Office) to responsible personnel only.
• Administrators must verify their identity with a secure password. And the history of use (Log) is strictly recorded.

3. Monitoring & Auditing

We record server access and operation history (Server Logs) for a period of time as required by law. To be used to investigate traces in the event of a cyber security breach.

4. Management when a security violation occurs (Incident Response)

If it is found that there has been a data breach or the system is attacked The agency has a process for suppressing incidents and evaluating impacts. Including notification to relevant people and regulatory agencies in accordance with legal requirements.