1. Controller and scope
Federation of Associations Employment Entrepreneurs of Thailand (the “federation” or “FET”) is the controller for this website and account registration. Its address, email and phone are provided at the end of this notice.
This notice covers visitors, account applicants and people contacting FET. Later document submission, membership certification or payments involving additional data require further information before that data is collected.
2. Required and optional data
For email registration, full name, email and password are required to create and verify an account. Without them, we cannot provide account registration or email verification. Phone number and organization are optional; you may register without providing them.
When you choose Google, Facebook or LINE registration or sign-in, the authentication service receives your email, name, provider account identifier and supplied profile details, such as a profile image, to identify you and connect your FET account without an FET password. Sign-in requires a verified email. We request account and email information, not permission to read Gmail, Facebook or LINE messages. External sign-in is optional; email registration remains available.
Passwords are processed by the authentication service. Neither the password nor the confirmation field is stored in profile metadata. Account information also includes account identifiers, email verification status, and the notice version, language and acknowledgement time.
Website and service operations may involve IP addresses, browser details, request times and error logs. Service providers may process these technical records to operate and secure their services.
For rights requests, we use account details, your request and proportionate identity-verification information. Do not include passwords, identity-document copies or sensitive information in your initial message.
3. Purposes and legal bases
Creating an account, confirming email, account communications and starting the registration you request rely on necessary pre-contractual steps under section 24 (3) of Thailand’s PDPA.
Preventing unauthorized access, harmful registrations and maintaining system security rely on legitimate interests under section 24 (5), taking account of your rights and the impact on you.
Handling statutory rights requests and complying with applicable legal duties rely on section 24 (6) where such a duty exists.
Acknowledging this notice is not blanket consent. This form does not enroll you in marketing. Any new purpose requiring consent must be explained and requested separately, with withdrawal available under the law.
4. Recipients and international processing
Recipients may include authorized FET staff, Vercel for hosting, Supabase for authentication and database services, and email providers used for service messages or receiving your requests.
If you select Google, Facebook or LINE, that provider receives an authentication request and connection details to provide your chosen sign-in method, under its own privacy notice. FET does not load these providers’ sign-in services until you choose to continue.
Data may be disclosed to legally authorized bodies where disclosure is required. Account creation does not publish applicant details or authorize disclosure to every business partner.
Cloud providers and subprocessors may operate or store data outside Thailand. International transfers require an applicable basis and safeguards under sections 28–29, as relevant. Contact FET for information about recipients and applicable safeguards.
5. Retention and ending processing
Account and initial-registration data are retained to provide your account and handle your request, based on whether the account or request remains active. When a request ends, an account closes or the purpose no longer applies, deletion, destruction or anonymization must be considered.
Records needed for legal duties or establishing, exercising or defending legal claims may require limited additional retention. Security records, acknowledgement information and backups require purpose-specific review and management cycles.
You may ask about the retention period applicable to your data or request that processing end through the contacts below, subject to necessity and lawful exceptions.
7. Your rights and requests
Subject to legal conditions and exceptions, you may request access or copies, portability, objection, erasure or anonymization, restriction and correction. Where processing relies on consent, you may withdraw that consent.
Use the email or phone below, identifying your account email, requested right and reply channel. We may request only proportionate additional information to confirm identity. Requests are considered within the applicable legal timeframe; reasons are provided where a request cannot be fulfilled.
You may complain to Thailand’s Office of the Personal Data Protection Committee if you believe your data has been handled unlawfully. Exercising rights does not depend on membership approval.
8. Changes to this notice
Each notice carries a version and update date. Changes to purposes or details affecting your rights require relevant information before the changed use, as applicable. Updating this notice does not automatically give consent for new purposes.