Hino Motors Asia Ltd.

Privacy Policy

Hino Motors Asia Ltd. ("HMA", "we", "us" or "our") recognizes the importance of protecting your Personal Data (as defined below). In this Privacy Policy ("Policy") there are descriptions about the collection, use, disclosure and / or transfer of your Personal Data obtained from various sources to other countries including your rights and practical guidelines about the said information.

1 About us

HMA is the data controller who collects, discloses and transfers your Personal Data to foreign countries.

HMA is a juristic person established under the laws of Thailand. Its head office is located at 99 Moo 3, Teparak Road, Teparak, Muang Samutprakarn 10270

HMA is part of the Hino family around the world and is one of the most important manufacturers of the Hino Group. The objective of the business is to produce Trucks, Buses, and Automotive Parts within Thailand and exports them for sale in various countries worldwide. In addition, HMA started opening a new production and development center in Thailand by utilizing advanced technologies in our manufacturing process to enable quickly respond to customer needs and strengthen for support of becoming Hino Group’s Truck production center in ASEAN.

2 Contact us

If you have inquiries or want to exercise your rights pursuant to this Policy, please contact us on the website Hino Motors Asia Ltd.

or using the contact information specified below.

2.1 Send us an email to: [email protected]

2.2 Call us at: Customer Contact Center (66) 0-2384-2900

Opening hours: Monday-Friday 08.15 - 17.15 hrs.

3 What are Personal Data?

"Personal Data" means any information that can directly or indirectly identify a person but excludes the information of a particular deceased.

4 What Personal Data Are Collected?

4.1 The Personal Data that we collect depends on your relationship with us and the services or products you need from us. Below are parts of the types of the Personal Data about you that we may collect, use, disclose and/or transfer abroad.

(A) Personal Details such as name prefix, name, surname, gender, age, occupation, work position, work place, education, nationality, date of birth, marital status, information on government-issued cards (such as identification card number, passport number, tax identification number, etc.), signature, sound recording, recording of telephone conversations, photos, CCTV footage, and other identification information.

(B) Contact Details such as address, telephone number, fax number, location information, email address, LINE ID, Facebook account, Instagram ID and other IDs from social online networking websites.

(C) Marketing and Communication Details such as your choice to receive marketing information from us, affiliates, business partner companies, and your communication options.

(D) Profile Details such as username, contact history, complaint history, your interests, demands, feedback, and answers in the Contact Form.

(E) Technical Details such as the Internet Protocol (IP) address, browser type and version, your search behavior and style, cookies, device ID, device model and device type, duration and location of access.

4.2 If you provide Personal Data of any other person such as name, surname, address details and telephone number for emergency contact to us or family members who use your car, you must ensure that you have the authority to do so and we are legally permitted to use their Personal Data in accordance with this Policy. Please give this policy to those people for their acknowledgment and/or to request for their consent (or use other legal bases as an exception to consent) to deliver such data to us in pursuance of this Policy.

4.3 We will not use sensitive Personal Data such as race, ethnic origin, political opinions, beliefs in sect, religion or philosophy, sexual behavior, criminal history, health information, disability, labor union information, genetic information, biological information, etc., except in the cases where the law requires us to do so or when you give your explicit consent.

You must ensure that all Personal Data provided are complete, accurate and true.

5 Methods of Receiving and Collecting Personal Data

We may receive and collect your Personal Data via the following means.

(A) Personal Data you provide to us: You may provide your personal information directly to us. It usually occurs when you contact us for information, fill out online forms or fill out documents, subscribe to membership or register to receive or request information about our products, services, or campaign/benefits, or when you post feedback to us.

(B) Personal Data we collect from you automatically: We may collect certain technical data about your device and your search behavior and style which are collected through Cookies and other similar technologies, for which we will notify you before use.

(C) Personal Data obtained from third parties: We will sometimes receive your Personal Data from others, such as the Hino Group companies or our business partner companies if those companies are authorized to disclose your Personal Data to us in accordance with their privacy policies and/or which you have given consent to disclose the data to those persons, as the case may be.

6 Objectives and Legal Bases of Personal Data Collection, Use and Disclosure

6.1 We collect, use and disclose the Personal Data for the following purposes (collectively called “Purposes”).

(A) To provide services and products to you: such as to enter into a contract and perform our obligations in accordance with any contract that we may have with you or the organization you represent, to support and perform other activities related to services or products.

(B) To manage our relationship with you: such as to contact and communicate with you as requested by you or in relation to the services or products, to facilitate your use of the services and products, to handle your queries, request, obtain feedback or complains.

(C) To improve business operations, services and products: such as to evaluate, analyze, develop, manage, improve, research and develop the business operations of services or products, to identify and resolve issues, to create aggregated and anonymized reports, to measure the performance of our service, to evaluate our employee’s performance on the service, to develop training for our employee.

(D) Communication and Marketing: such as to send you business and marketing

communication, press releases, public relations, to send invitation letter to attend the event, to keep you updated on our services and products via channels (e.g. website, email, telephone, fax, post, SMS, MMS, system, and social media channels).

(E) Recruiting and employment relationship: such as to carry out recruitment activities, to respond to your request for a job position, to evaluate your suitability as a job candidate and your qualifications for positions, to determine eligibility for initial

employment and verification of references and qualifications, to administer pay, to

provide welfares and benefits, to process welfare claims of you and your family (e.g. medical and health related claim), to process work related claims (e.g. transportation), to provide work related services, facilities and equipments, to provide training and/or development course, to conduct performance and competency evaluation, to conduct employee relation activities, to conduct health promotion activities, to conduct internal communication and activity, to carry out planning and analysis for career development, to assess qualifications for a particular job or task, to administer and process your application of visa and work permit, to gather evidence for disciplinary action, or termination, to establish a contact point in the event of an emergency, to comply with applicable labor or employment laws, and such other purposes as are reasonably required by us in connection with your candidacy or employment.

(F) To verify and confirm your identity: such as to register, verify, identify and authenticate you or your identity.

(G) IT Management: such as for business management purpose including for IT operations, management of communication system, operation of IT security and IT security audit, internal business management for internal compliance requirements, policies, and procedures.

(H) Compliance with regulatory and compliance obligations: such as to comply with legal obligations, legal proceedings, or government authorities’ orders which can include orders from government authorities outside Thailand, and/or cooperate with court, regulators, government authorities, and investigating or preventing crime.

(I) Protection of our interests: such as to protect the security and integrity of our business and to exercise our rights or protect our interest where it is necessary and lawfully to do so (e.g. to detect, prevent, and respond to fraud claims, intellectual property infringement claims, or violations of law), to manage and prevent loss of our assets andproperty, to secure the compliance of our terms and conditions, to detect and prevent misconduct within our premises which includes our use of video record, CCTV and photographing, to follow up on incidents, to prevent and report criminal offenses.

(J) Fraud detection: such as to verify your identity, and to conduct legal and other regulatory compliance checks (e.g. to comply with anti-money laundering regulations, and prevent fraud). This includes to perform sanction list checking, internal audits and records, asset management, system, and other business controls.

(K) Corporate transactions: In the case of sales, transfers, mergers, business rehabilitation or any other similar case, we may send or transfer your data to one or more third parties as part of that process.

(L) Life: To prevent or suppress danger to one’s life, body or health.

6.2 The legal basis for our collection, use, disclosure, and/or transferring of your Personal Data is one of the following:

(A) To comply with the laws that we are subject to.

(B) To comply with the agreements you or the organization you represent are an agreement party with us or to use in fulfilling your request before entering into that agreement.

(D) To prevent or stop danger to life, body or health of individuals.

(E) To promote public benefits of the populace missions or the exercise of rights of government officials

(F) In the event that we need your consent for certain activities related to the collection, use or disclosure of your Personal Data, we will ask for it before using your Personal Data.

6.3 In the event that we may use your Personal Data for other actions not specified above, we will send a notice to you to indicate the needed information and will request for your consent first in case permission is needed.

6.4 In the case that we need to collect your Personal Data in order to comply with the laws or agreement or it is necessary to provide Personal Data to enter into an agreement and you are not able to make provision when requested, we may not be able to fulfill the relevant objectives above.

7 Disclosure of Personal Data

7.1 We may disclose your Personal Data to the third parties who collect, use or disclose them for the purposes of this Policy. You can read the privacy policies of those third parties to learn more about how they collect, use or disclose your Personal Data, for which you also are under those separate privacy policies.

7.2 We may disclose your Personal Data under the Purposes of this Policy to the following third parties.

(A) The Hino Group: As we are part of the companies in Hino Group, which cooperate in providing services to the customers and in servicing various systems, we may need to transfer your Personal Data to the following affiliated companies or allow them to access your Personal Data for the purposes mentioned above.

1) Hino Motors, Ltd.

2) Hino Motors Sales (Thailand) Co., Ltd.

3) Hino Manufacturing (Thailand) Ltd.

4) Hino Powertrain Manufacturing (Thailand) Ltd.

5) J.Filter Co., Ltd.

(B) Our Service Providers: We may share your Personal Data with the service providers or the third-party service-providers to offer various services on our behalf or to help provide products and services to you, including but not limited to

1) Transportation, warehouse and logistic service providers

2) Research agencies, analytics and survey service providers

3) Marketing, advertising media, event organizers and communications agencies

4) Data storage and cloud service providers

5) Outsourced administrative service providers

(C) Our Business Partner Companies: They are in and outside the country such as business of manufacturing and sell of vehicles or automotive parts (e.g. supplier or dealer)

(D) Third Parties as Required by Law: In some cases, we may have to disclose or share your Personal Data in order to comply with the laws or regulations, including compliance with the law enforcement agencies, courts, competent officials, government offices or other third parties in the event that we believe we need to comply with the legal duties or regulations or need to protect our rights, rights of others or the safety of people or to investigate, prevent or manage fraud, stability or security issues.

(E) Advisors: They include lawyers, technical officials and account auditors who assist in our business operations and exercise the rights of claims and to defend against them.

(F) Assignees of Rights and / or Duties: In the case of a business rehabilitation, business merger, business transfer, either wholly or partially, sales, purchases, joint ventures, grants, transfers, or sale of part or all of a business, property or stock or other similar transactions.

7.3 We may disclose your Personal Data to the third parties in the event that the law requires or permits. Therefore, if the law requires your consent, we will ask for your consent first.

8 Transfer and Protection of Personal Data

8.1 Since we are part of affiliates of Toyota, there may be a transfer or forward of your Personal Data within the Group to collect, use and disclose the Personal Data for the above Purposes. This will let you access our services for the customer care, for the decision making towards the service improvement, for the development of contents or for other purposes specified in this Policy.

8.2 When your Personal Data is transferred to a Toyota affiliate overseas, we will comply with the laws in connection to them. We will also comply with the security measures to ensure the protection of your Personal Data at an adequate level and we will check to assure that the transferee in foreign countries will protect your Personal Data under the same standard of protection as that under Thai laws if necessary.

8.3 In the event that we need to transfer your Personal Data to another country, if we find that the Personal Data protection standards in that foreign country is not equal to the privacy protection regulations announced by the Commission, we will ask for your consent or use other legal bases that permit to transfer your Personal Data off Thailand.

9 Period of Data Collection

9.1 We will collect Personal Data for as long as necessary to carry out the Purposes set out in this Policy and pursuant to our duties under law. After your Personal Data is no longer needed or no law is available to enforce the collection, we will delete or destroy those Personal Data without notifying you.

9.2 The data collection periods may vary depending on the Personal Data collection objectives. In the event that the Personal Data are used for a short period of time, for example for a particular job, for the marketing activities, or for the purpose of recruiting personnel, we may delete or destroy that information after the end of the said period.

9.3 You have the right to ask us to delete, destroy or make Personal Data non personally identifiable in some cases unless we need to keep your Personal Data in accordance with the laws.

10 Privacy Policy of Minors

Our products, services, and websites do not have the goal or intent to collect Personal Data from minors under 20 years of age, quasi-incompetent persons and incompetent persons. If you are one of those people who want to contact us, you must obtain the consent of the parent stipulated by law, legal guardian or guardian before contacting us or providing us with your personal information.

11 Rights in your Personal Data

You have the following rights in your Personal Data that are in our possession. If you wish to exercise your rights, you can contact us pursuant to the details in the topic "Contact Us" above.

11.1 Right of Access / obtain record

You may request to access or to know the details of the personal information you have provided to us except for the case of denial by law or court order or except for the case that the access or request to access will make damage to the rights and liberty of others.

11.2 Rights to Rectification Data

You have the right to request for the correction of your Personal Data if those that are in our possession are wrong or incomplete.

11.3 Rights to Erasure Data

You can request us to delete or destroy your Personal Data or make them unidentifiable to you in any of the following cases.

(A) The Personal Data that are no longer necessary for the purposes of collection or use.

(B) The Personal Data for which you have withdrawn your consent for us to collect, use and disclose and we have investigated to find no legal basis for us to make further collection or use.

(C) The Personal Data that you have objected that we should not further collect nor use them and we cannot reject the objection with valid legal exceptions.

(D) The Personal Data that you have objected to collect, use or disclose for direct marketing purposes.

(E) The Personal Data are collected, used and disclosed illegally.

You have the right to request for the deletion or destruction of the personal information you have provided above except for the cases of legal exceptions such as collecting for the purpose of agreement performance or establishing legal claims, compliance with the legal claims, using to fight against the legal claims or other purposes specified by laws.

11.4 Rights to Restrict Use

You have the right to ask us to suspend the use of your Personal Data in any of the following cases:

(A) You have requested us to correct your Personal Data to be current or complete, and we are in the process of reviewing your request.

(B) You have requested to suspend the use of information that we may collect, use or disclose illegally rather than delete or destroy it.

(C) We have no collecting purpose to collect your Personal Data but you have asked us to store it for the establishment, compliance and exercise of legal claims or for defense against legal claims for your benefit.

(D) You have objected to the collection, use, or disclosure of your Personal Data for the reason of public interest or the use of state power or legal benefits; and we are in the process of reviewing your request.

(E) You have objected to the collection, use or disclosure of your Personal Data based or with citation on scientific, historical or statistical research (if any); and we are in the process of reviewing your request.

11.5 Right to Object

You have the right to object the collection, use or disclosure of the Personal Data in the following cases.

(A) They are for legitimate interests of ours or of other people.

(B) They are for the public benefit or the use of state power that has been given to us.

(D) They are for scientific, historical or statistical research purposes (if any).

If you exercise the right to object the collection, use or disclosure of such Personal Data, you can also request us to delete them or restrict such use.

11.6 Right to Transfer

You are entitled to receive your Personal Data that we have collected by requesting us to send you such information in a document or electronic form unless the data transfer cannot be implemented because of the limitations of our procedures.

11.7 Right to Withdraw Consent

You have the right to withdraw the consent to collect, use or disclose the Personal Data if you give the said consent to us except for the cases of the restriction on such withdrawing rights by law or by our contractual performance duties that are of interest to you. Withdrawing your consent will not affect the collecting, using, or disclosing of the Personal Data that you have already given consent to.

11.8 Right to Make Complaints

You have the right to issue complaints about the collection, use, and disclosure of the Personal Data. In the event that we violate or do not comply with the law, you can make a complaint through our contact methods and you may make a complaint to the Personal Data Protection Commission.

12 Amendments to this Policy

12.1 We may amend this Policy from time to time in accordance with the change of use of your Personal Data and in accordance with the applicable laws. We will notify you about the changed policy via our contact methods.

12.2 We will use the latest version of this Policy for reference on how to collect, use and disclose your Personal Data.

This Policy comes into effect on 25 August 2022 and supersedes all of our privacy policies earlier designated.