Privacy Notice Simulator 2021 at Thai Airways International Pub Co., Ltd.

---

1. Introduction

Thai Airways International Public Company Ltd. (THAI), 89 Vibhavadi Rangsit Road, Bangkok 10900, realizes the importance of personal data of our training devices customers.

This privacy notice applies to the collection and processing of your personal information in relation to:

• Your use of our training devices/equipment and related systems such as Training Management System (TMS), Electronic Flight Log, and Flight Simulator Management System (SimSys).

This privacy notice also describes your data protection rights. More information about your rights, and how to exercise them, is set out in Section 5 below.

2. What information do we collect?

We generally collect your personal data, either directly from you or from authorised representatives, through our websites, web applications, email, and other channels.

We collect and process personal data about you when you interact with us and our websites and when you create training device snags.

This includes:

• Personal information such as first name, last name, passport information (including ID number, date of issue, date of birth, nationality, and date of expiry), place of work, training period, and your signature.
• Log data and device information such as logon id, activity date-time.
• Employment information such as personnel ID.
• Contact information such as e-mail address, postal address, and phone number.

3. How do we use this information, and what is the legal basis for this use?

We process your personal data according to the purposes and limited to what is necessary for the following purposes:

• To fulfill a contract, or take steps linked to a contract where you use our flight simulator:
  • To reserve training device sessions.
  • To track training device snags status.
  • To release flight log documents.
  • To use in the training management system.
  • To issue Invitation Letter for VISA Application from THAI (where applicable)
• For purposes which are required by law and regulation:
  • To keep activity log of using training device
  • In response to requests by law enforcement authorities

4. Who will we share your personal data with, where and when?

If necessary for the provision of services to you, we will share your data with other aviation authorities and embassy who take part in the provision of the respective services to you. This may include:

• Civil Aviation Authority of Thailand (CAAT)
• The International Air Transport Association (IATA)
• Local Thai Embassy

5. What rights do you have?

You have the right to ask us for information about our data processing or for a copy of your personal data; to correct, delete or restrict processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format.

In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required to keep by law or when we have compelling legitimate interests in retaining the data.

We will provide you with a copy of your personal data when you request to do.

We shall inform you without delay within 30 days after receiving of the request. This period may be prolonged for a further month, if several data subjects exercise their rights and their cooperation is necessary to a reasonable extent. If we refuse to take action on the request of the data subject, we shall inform you of the reasons for the refusal.

When you are under the Thailand Personal Data Protection Act (PDPA) or the EU General Data Protection Regulation (GDPR), to exercise any of these rights you can get in touch with us using the details set out below. If you have unresolved concerns, you have the right to complain to THAI data protection authority or EU data protection authority where you live, work or where you believe a breach may have occurred.

6. When is it mandatory to provide data to us?

In some cases it may be necessary that you provide us with data, in order for us to enter into a contract with you and to provide you with the services that you request. In such cases we will not be able to submit these services to you without the data.

7. How can you contact us if you have any questions?

We hope that we can satisfy queries you may have about the way we process your personal data. If you have any concerns about how we process your personal data, or would like to opt out of direct marketing, you can send your request to;

Privacy Office:

• Thai Airways International Public Company Ltd.
• 89 Vibhavadi Rangsit Road, Bangkok 10900, Thailand
• Email: privacy@thaiairways.com

THAI has appointed EU representative for the purposes of the GDPR. If you are in EU and would like to contact us, you can also send your request to;

Thai Airways International Public Company Ltd.

• ZEIL 127, 60313 Frankfurt, Germany
• Email: EU.Representative@thaiairways.com

8. How long will THAI retain your data?

In general, THAI will retain your personal data as long as it is needed for the respective purpose of data processing and applicable law, which are the life of the flight simulator in 35 years and the retention of training record in 21 years. Personal data may also be contained in backup files which we keep for information security purposes and regularly delete when the backup period is over.