Definitions and applicable scope

• Personal Data means any information relating to a Person, which enables the identification of such Person, whether directly or indirectly, but not including the information of the deceased Persons in particular.
• Data Subject means any individual person, natural person, who can be identified, directly or indirectly, via an identifier such as a name, an ID number, location data, or via factors specific to the person’s physical, physiological, genetic, mental, economic, cultural, or social identity.
• Data Processor means any person who operates in relation to the collection, use or disclosure of the Personal Data pursuant to the orders given by or on behalf of a Data Controller, whereby such Person or juristic person is not the Data Controller.
• Services mean all of the Water Park’s services, including but not limited to ticket selling, attractions, water slides, pools, entertainments, foods and beverages, merchandise, rental services, photo booth, lockers, private cabanas, transportation, and first aid.
• Customer means any natural person who rightfully holds ticket and enters into the Water Park to use our services.
• Data Controller means any person having the power and duties to make decisions regarding the collection, use, or disclosure of the Personal Data.

Use of Personal Data

 • How do we process your personal data?

The Water Park will handle your Personal Data for the purposes and under the legal grounds as describe in this Privacy Notice. Your personal data will be only used; (a) as necessary for the performance of a contract which you have entered into as a Customer of the Water Park or for complying with your request prior to entering into such contract; (b) for compliance with the law or necessary for the performance of a task carried out in the public interest by the Water Park or for exercising of official authority vested in the Water Park; (c) as necessary for the legitimate interest of the Water Park, or other persons or juristic persons other than the Water Park; and (d) for preventing or suppressing danger to life, body, properties, or health of any person.

 • How do we process your personal data?

The Water Park may disclose your Personal Data under the determined purposes in accordance with the agreements with the Water Park and/or the laws and regulations to the following entities and persons:
— Delivery companies;
— Travel agency companies;
— Insurance companies;
— Payment Network and Payment Service Provider, such as VISA, MasterCard;
— Government organizations, such as Police, the Revenue Department, etc.;
— Professional Service providers, such as Accounting Auditor, Legal Advisor, etc.
the third person who will receive the data transfer or process Customer’s Personal Data for us will be required to have in place appropriate privacy policy and to comply with the standards and duties relating to the protection of Personal Data as prescribed by the Personal Data Protection Laws. We do not permit the third person to use our Customer’s Personal Data in a way that diverges from the agreed scope and purposes.

 • How would the data be transferred to third person in foreign countries?

In the rare event that the Water Park would send or transfer your Personal Data to the recipient outside Thailand, we will ensure that the destination country, the international organization, or such overseas recipients has a sufficient standard for the protection of Personal Data. In some cases, we may request your consent for the transfer of your Personal Data outside Thailand, subject to the requirements under the Personal Data Protection Laws.

Rights of the Customers as a Data Subject

As the Data Subject, you have the following rights in relation to your Personal Data, subject to the rules, methods, and conditions under the Personal Data Protection Laws. In this regard, if you wish to exercise your rights, you can contact us at the contact information provided hereunder.

• Right to Access: you have the right to request a copy of all your personal data stored at our Water Park and to request for a declaration of how we collect, use, and disclose such personal data to the extent permitted by the relevant laws any information relating to a Person, which enables the identification of such Person, whether directly or indirectly, but not including the information of the deceased Persons in particular.
• Right to Data Portability: under the Personal Data Protection Laws, you have the right to obtain your Personal Data in the format, which is readable or able used by automated platforms, including to request to send or transfer your Personal Data to another Data Controller or to you, unless it is technically unfeasible to do so.
• Right to Object: you have the right to raise an objection to the processing of your Personal Data which has been relied on certain legal grounds and/or collection purposes, including:
  — Legitimate Interest or Public Interest;
  — Purpose of Direct marketing;
  — Purpose of scientific, historic, or statistical research, unless it is necessary for the public interest;
• Right to erasure: you have the right to request for data deletion or anonymization, in certain circumstances as follows:
  — there is no further necessity to retain your Personal Data according to the processing purposes;
  — you withdraw your consent, and we cannot rely on other legal grounds to process your Personal Data;
  — there is objection raised against data processing;
  — the retaining or processing of your Personal Data becomes unlawful.
• Right to restriction: you have the right to request a restriction to the processing of your Personal Data under the following cases:
  — we are pending the verification of the accuracy of Personal Data as per your request;
  — you request a restriction to be used on your Personal Data instead of to be deleted or erased by your right of erasure;
  — where the Water Park has no further necessity to use your Personal Data, but you request us to retain such Personal Data, for establishment, compliance, or exercise of the legal claims, or for defense of the legal claims;
  — we are pending the verification according to your right to object.
• Right to rectification: you have the right to request for rectification of your Personal Data to make it complete, accurate, and/or up to date.
• Right to revoke consent: in the event that the Water Park relied on your consent to process your Person Data, you have it right to withdraw such consent anytime that your Personal Data is in possession of us.

If you have any concerns or questions about our practices in relation to the processing of your Personal Data, please contact us at the contact details provided hereunder. In case of an alleged infringement of Personal Data Protection Laws, you have the right to complain to our Personal Data Protection team.

The Water Park will apply our best effort to facilitate and carried out at your request, unless it appears that to carry out at such request causes undue burden on or is in the risk of violating of the protection of others’ Personal Data or illegal or impossible to perform such request. However, the retraction, if any, only applies to the data processing carried out thereafter. Any data processing activity carried out before the retraction will not be reversed.

Personal Data Retention and Security

 • How do we safekeep the customers’ personal data?

The Water Park has in place the Personal Data storage systems which is appropriate and sufficient in term of mechanism, technique, and security standard according to the Personal Data Protection Laws and the relevant regulations.

 • How long do we keep your Personal Data?

The Water Park will retain your Personal Data for the period necessary to fulfil the purposes for which the Personal Data was processed and/or other important matters such as legal requirements, accounting, and auditing purposes. We will delete such Personal Data from our storage or systems, without prior notice, when the retention period ends.

 • What are the measures for data leakage prevention?

The Water Park applies the limitation of access of your Personal Data by staff, employees, and representatives of the Water Park to prevent your Personal Data from the unauthorized usage, disclosure, erasure, or inappropriate access.