1. บทนำ

S Rentral Co., Ltd. (“the Company”) realizes the importance of personal data and other information about you so that you can be confident that the Company is transparent and responsible in collecting, using or disclosing your information in accordance with the Personal Data Protection Act B.E. 2562 and other related laws.
The Company has therefore established this Privacy Policy (“Policy”) to set out the guidelines and practices for the Company’s personal data protection operations.

2. Scope of policy enforcement

This Policy applies to personal data of individuals who have a current or potential relationship with the Company, whose personal data is processed by the Company, its officers, employees, contractors, business units or other entities operated by the Company, and includes contractors or third parties who process personal data on behalf of or on behalf of the Company (“Personal Data Processors”) under various products and services, such as websites, systems, applications, documents or other forms of services operated by the Company (collectively, the “Services”).

Persons having a relationship with the Company as described in the first paragraph include:

Individual customers
Officer or operator, employee
Business partners and service providers who are individuals
Directors, attorneys, representatives, agents, shareholders, employees or other persons who have a similar relationship with a legal entity that is related to the Company.
Users of the company's products or services
Visitors to or use the website www.srental.com , including systems, applications, devices or other communication channels controlled by the Company.
Other persons whose personal data the Company collects, such as job applicants, family members of employees, guarantors, etc.

Items 1) to 7) are collectively referred to as “you”.
In addition to this Policy, the Company may provide a privacy statement (“Notice”) for the Company’s products or services to inform data subjects who are users of the Services of the personal data being processed, the purposes and lawful grounds for the processing, the retention period of personal data, and the rights that data subjects have over their personal data in relation to that specific product or service.

In the event of any material conflict between the contents of this Privacy Notice and this Policy, the Privacy Notice of that service shall prevail.

3. Objective

To ensure that the Company's personal data protection operations comply with legal requirements.
To be a guideline for the protection of personal data that the company collects and processes for employees and those involved.
The Company strictly adheres to the aforementioned personal data protection measures to ensure that the personal data owners are confident that the personal data collected by the Company will be protected and processed appropriately, transparently, and in accordance with the requirements of the Personal Data Protection Act.

4. Definition

Personal Data Protection Act means the Personal Data Protection Act B.E. 2562 and any future amendments, including any secondary laws and related regulations.

Personal Data means information about an individual that enables the identification of that individual, either directly or indirectly, such as name, surname, nickname, email, telephone number, address, vehicle registration, and biometric data such as face, fingerprints, etc., but does not include information about deceased persons.

Data Controller means a person or legal entity that has the authority to make decisions regarding the collection, use or disclosure of personal data.

Data Processor means a person or legal entity that performs operations related to the collection, use or disclosure of personal data at the instruction of or on behalf of a personal data controller. However, such person or legal entity that performs such operations is not a personal data controller.

Data Subject means a natural person who is the owner of personal data, but not in cases where the individual has ownership of the data or created or collected the data himself.
Processing means the collection, use or disclosure of personal data in accordance with data protection laws.

Employee means an executive, employee, worker, or person who works or performs duties for the Company under a contractual agreement or is legally appointed to perform duties.

5. Key principles for protecting personal data

The Company will process personal data based on the following key principles:

The processing of personal data must be lawful, fair and transparent to the data subject (Lawfulness, Fairness and Transparency)
The processing of personal data will be carried out within the scope of the purposes determined by the Company, which are clear and legally enforceable purposes, and the data will not be processed in a way that is inconsistent with or inconsistent with such purposes (Purpose Limitation).
The processing of personal data must be adequate, relevant and necessary for the purposes for which it is processed (Data Minimization).
The processing of personal data must be carried out in a correct manner and the data must be kept current where necessary, and appropriate steps will be taken to ensure that any inaccuracies are rectified (Accuracy).
The storage of personal data must be for the period necessary for the processing of that data (Storage Limitation), unless the law requires the Company to store personal data for longer than the period necessary.
The processing of personal data must include appropriate data security measures, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage (Integrity and Confidentiality).

6. Rights of data owners

The Personal Data Protection Act B.E. 2562 provides for several rights of data owners. These rights will come into effect when the law on these rights comes into force. Details of these rights include:

Right to request access to personal data You have the right to request access, receive a copy of, and request disclosure of the source of personal data that the Company collects without your consent, except in cases where the Company has the right to refuse your request on grounds of law or court order, or in cases where the use of personal data is contrary to law.
Your rights may have an impact that may cause harm to the rights and freedoms of others.
The right to request correction of personal data to be accurate, complete and up-to-date. If you find that your personal data is incorrect, incomplete or out-of-date, you have the right to request correction to make it accurate, up-to-date, complete and not misleading.
Right to delete or destroy personal data You have the right to request that the DLA delete or destroy your personal data or make your personal data unidentifiable. However, the exercise of this right to delete or destroy personal data must be subject to the conditions prescribed by law.
Right to request suspension of use of personal data You have the right to request suspension of use of your personal data in the following cases:
The right to object to the processing of your personal data. You have the right to object to the collection, use or disclosure of personal data about you, except where the Company has legitimate grounds to refuse the request (for example, the Company can demonstrate that there are stronger legitimate grounds for the collection, use or disclosure of your personal data, or for the establishment, exercise or enforcement of legal claims, or in the public interest of the Company).

- When the Company is conducting an audit at the request of the owner of personal data to correct personal data to be accurate, complete and current.
- The personal data of the data owner is collected, used or disclosed unlawfully.
- When the personal data of the owner of the personal data is no longer necessary to be kept for the purposes that the Company has informed when collecting it, but the owner of the personal data wishes the Company to continue to keep that data for the purpose of exercising legal rights.
- When the Company is proving a legitimate reason to collect personal data of the data owner or verifying the necessity to collect, use or disclose personal data for public benefit due to the data owner exercising the right to object to the collection, use or disclosure of personal data.
Right to withdraw consent In the event that you have given consent to the Company to collect, use or disclose personal data (regardless of whether such consent was given before or after the Personal Data Protection Act B.E. 2562 came into force), you have the right to withdraw your consent at any time during the period that your personal data is retained by the Company, unless there is a legal restriction requiring the Company to continue retaining the data or there is still a contract between you and the Company that benefits you.
Right to request, transmit or transfer personal data. You have the right to request from the Company your personal data in a format that is commonly readable or usable by automated tools or devices and that allows the Company to use or disclose personal data by automated means, including requesting that the Company transmit or transfer data in such a format to another data controller. The exercise of this right shall be subject to the conditions prescribed by law.

7. Policy review and improvement

The Company may consider updating, amending or changing this Policy as it deems appropriate and will notify you through the website www.ekcrane.com with the effective date of each revised version. However, the Company recommends that you check regularly to be informed of the new Policy through the specific channels for the activities that the Company conducts, especially before you disclose your personal information to the Company.

8. การติดต่อสอบถามหรือใช้สิทธิ

If you have any questions, suggestions or concerns about the Company’s collection, use and disclosure of personal data or about this Policy, or if you wish to exercise your rights under the Data Protection Act, you may contact us at

Data Controller
- Name: S. Sovation Co., Ltd.
- Contact location: Narita Building, 4th floor, Kasikorn side, Room 401 Building
- Contact channel: www.AESOVATION.com
- Call: 02-000-0000
Data Protection Officer (DPO)
- Contact channel: www.SRENTAL.com
- Contact: 02-000-0000

9. Personal information collected by the Company

Information about an individual, such as first and last name, age, date of birth, gender, marital status, national identification number, passport number or other government-issued identification information, postal address, place of work, telephone number, email, Line ID, IP address, Cookie ID, browser information and other information about the device you use to access the Company's website, application and other communication channels.
Information about an individual, such as first and last name, age, date of birth, gender, marital status, national identification number, passport number or other government-issued identification information, postal address, place of work, telephone number, email, Line ID, IP address, Cookie ID, browser information and other information about the device you use to access the Company's website, application and other communication channels.
Audio, visual or other electronic data that may identify an individual, which may include information about geographic location.
Sensitive Data The Company will collect, use and/or disclose sensitive personal data such as information about race, religion, health information of service users, biometric data, disability or any other sensitive data that will be useful in providing services only when the Company has received express consent from the user or in cases where the Company is required by law. The Company may have to collect, use and/or disclose biometric data such as voice identification data for the purpose of verifying and confirming the identity of service users who apply and/or conduct transactions through the website, Call Center or other channels.

10. Period for collecting personal data

The Company will retain your personal data for the period necessary to complete the purposes specified in this Privacy Policy, except where the law requires or permits a longer retention period, which may be approximately 5-10 years or longer as necessary, such as according to the statute of limitations set by law for relevant matters, for legal proceedings, or for inspections by regulatory agencies.