Privacy and Data Protection Policy

LAST UPDATE: 20.04.2023

Data Controller:

The entity responsible for data processing is Encinacorba Sales Consulting Co., Ltd, headquartered at 59/158 Moo 6, Bo Phut Subdistrict, Ko Samui District, Surat Thani Province, Thailand, with Corporate Registration Number 0845567007267. For any inquiries, please contact us at: adrian@autochatbnb.com.

Scope

This policy applies to all personal data collected by Encinacorba Sales Consulting or on its behalf during various interactions with data subjects, either in person or through digital means.

1. Collection, Registration, and Use of Personal Data

Encinacorba Sales Consulting collects and processes personal data in compliance with applicable laws for the purposes described below:

Data for Service Provision

The personal data collected is automatically processed and intended for managing service requests, service execution, and support requests. Specifically, we use the data to:

• Ensure proper service operation, including payment and billing management.

• Communicate scheduled updates, report issues, or provide relevant service information.

• Send satisfaction surveys (participation is voluntary).

Legal Basis: Data is processed based on the performance of a contract or to take steps at the request of the data subject prior to entering into a contract.

User Support

Personal data sent via email, phone, or chat will be treated with appropriate security measures. However, we recommend avoiding sharing sensitive personal data through these channels unless absolutely necessary.

Legal Basis: Data is processed based on the legitimate interests pursued by the controller.

Commercial Contacts

These data will be securely stored on Google Drive servers, which implement advanced security measures such as SSL encryption and access controls. Additionally, Encinacorba Sales Consulting restricts access to these data exclusively to authorized personnel.

Legal Basis: Data is processed for the performance of a contract or based on legitimate interests.

Marketing Contact Data

We may collect publicly available contact information or data exchanged during events to communicate commercial opportunities.

Legal Basis: Data is processed based on legitimate interests or with the data subject’s consent.

Fraud Prevention

To verify legitimacy or prevent fraud, we may request additional identity information such as proof of address or official identification.

Legal Basis: Data is processed to comply with legal obligations or based on legitimate interests.

Contact Forms

Data provided through contact forms will be securely processed. We recommend avoiding sharing unnecessary sensitive data.

Legal Basis: Data is processed to take steps at the request of the data subject prior to entering into a contract.

Recruitment

Personal data sent for job applications will be securely stored and deleted within 12 months if not selected. Data related to ongoing recruitment processes will only be retained for the duration of the process.

Legal Basis: Data is processed with the data subject’s consent or based on legitimate interests.

2. Collection and Use of Location Data

Where applicable, location data may be collected to improve operational efficiency. Measures such as encryption and access controls are implemented to ensure data security.

3. Database Compliance

All collected data is integrated into our database and processed in compliance with applicable data protection laws.

4. Access, Rectification, Portability, and Deletion of Data

Access and Rectification: Users have the right to access and rectify their data through secure and authenticated means.

Data Retention and Deletion: Data will be retained as required by legal obligations and securely deleted upon the user’s request, except where retention is necessary for legal or legitimate reasons.

Portability: Users may request the export of their personal data by contacting adrian@autochatbnb.com.

5. Security and Use of Your Information

Data collected by Encinacorba Sales Consulting is protected with firewalls, antivirus software, SSL encryption, and other technical measures to prevent unauthorized access.

6. Payments

All payments made through our services are processed using Stripe, a secure and reliable payment platform that complies with international data security standards (PCI DSS). Stripe implements advanced measures, such as data encryption, to ensure the protection and security of user information. Encinacorba Sales Consulting does not store users’ payment data.

7. Use of WhatsApp Conversations in the AutoChatBNB Application

All conversations conducted via our integration with WhatsApp through the AutoChatBNB application are processed by a secure server that ensures the privacy of each user. This server uses anonymization measures, making it impossible to identify which user is associated with a specific conversation. Communication confidentiality is a priority and is maintained through advanced security standards.

8. Profiling and Automated Decisions

Encinacorba Sales Consulting does not use automated decision-making processes, including profiling.

9. Privacy by Design and Default

Appropriate measures are implemented to ensure data protection by design and by default. Any privacy breaches will be reported within 72 hours to the competent authority and affected individuals.

10. Applicability Limits

This policy does not apply to third-party websites hosted on our infrastructure. Users should review the privacy policies of those sites separately.

11. Legal Compliance

This policy complies with applicable data protection laws. Updates will be notified via email when changes are made.

Additional Information:

Director: The company has a sole director: Adrián Gasca Sancho.

Registered Capital: The company’s registered capital is 2,000,000 THB.

Legal Framework: This document complies with the Thai Civil and Commercial Code regarding entity registration as stipulated by Thai law.

Contact: For any questions or requests related to this policy, contact us at adrian@autochatbnb.com.