Privacy Notice

Allianz Ayudhya Capital Privacy Notice

We care about your personal data

Allianz Ayudhya Capital Public Company Limited (the Company“, ”we”, ”us”). Your privacy is important to us. This privacy notice explains how and what type of personal will be collected, used or disclosed or dealt with, whether by manual or automated means, such as recording, organization, storage, adaptation or alteration, retrieval, sending, transfer, disclosure or making available by any means, alignment, combination, prohibition of access or restriction, erasure or destruction (“processing”), processing purposes and with whom it is shared or disclosed, and your rights in this regards and retention period.

1. Definition

  • Data Controller means the legal person or the Company who controls and is responsible to collect, use or disclose personal data in paper or electronic files regarding to Personal Data Protection Act. B.E. 2562 including announcements, rules, regulations or subordinate laws issued thereunder.
  • Data Processor means the person or legal person who operates in relation to the collection, use, or disclosure of the personal data pursuant to the orders given by or on behalf of a Data Controller, whereby such person or legal person is not the Data Controller.
  • Allianz Group Companies means Allianz SE, associated and affiliated company of Allianz SE, including Allianz Ayudhya Group Companies
  • Allianz Ayudhya Group Companies means Allianz Ayudhya Assurance Public Company Limited, Allianz Ayudhya General Insurance Public Company Limited, and Allianz Ayudhya Capital Public Company Limited and My Health Services (Thailand) Company Limited including associated and affiliated company of Allianz Ayudhya Capital Public Company Limited.

2. What will your personal data be collected and processed?

2.1 Basic Personal Data

  • Name, surname, title, identification card number, passport number or other identification card number, addresses, phone number, email address, date of birth, social username, financial information or education information or work experience legal status;
  • Information on the social media platforms that we receive from other social media providers or from the subscription for our services, usage of our website or application;
  • Video or conversation record when you attend a meeting or contact us in all channels;• IP address, the type of browser software used, and the date, time and duration of your usage of our website or application, where such details are automatically recorded.

2.2 Sensitive personal data such as health data, disabilities, race or ethnicity, genetic data, biometric data, sexual behavior, criminal records, trade union membership, health records, claim history;

If you would like us to perform your request, you must provide personal data that is necessary in order that we can fulfill your request. If you do not wish to provide your personal, we may refuse to act on your requests.

3.    How will we obtain and use your personal data?

3.1   The Company obtains your personal data from:

  • The Company collects personal data directly from you via documents submitted to the Company, your interaction with us from all of the Company’s communication channels and your request to use the Company’s website or applications;
  • We may also obtain your personal data from third parties or public databases e.g. Allianz Ayudhya Group Companies or Allianz Group Companies, public authorities, authorities under other applicable laws and social media providers.

3.2   We will use your personal data for the following purposes:

Swipe to view more

Lawful Basis

Purposes

For performance of contractual obligations between you and the Company or fulfillment of your request
  • To service or perform our duties and responsibilities under the contract or agreement;
  • To contact, communicate you a necessary information e.g. delivering meeting agenda, notification of dividend payment or the Company performance
  • To verify a shareholder right execution for any meetings
  • For compliance with laws to which the Company is subjected to for business operation or other authorities
  • To verify a qualification of directors or shareholders as required by laws e.g. Securities laws, Anti-Money Laundering, Terrorism and Proliferation of Weapons of Mass Destruction Financing, Bankruptcy or Taxation laws;
  • To notify the authorities about appointment of directors or change of shareholders e.g. Ministry of Commerce, Stock Exchange of Thailand, the Securities and Exchange Commission;
  • To disclose or submit information, documents or any reports as required by laws e.g. investigation report or suspicious transaction report, complaint handling result;
  • To perform or cooperate with the competent officers as requested from time to time e.g. court order or official receiver;

For legitimate interest of the Company
  • To perform statistical analysis, satisfaction survey and data analytic in order to develop the Company’s strategies or improved our services;
  • To examine or detect for security purpose or fraud prevention;
  • For the benefit of the Company, Allianz Group Companies or Allianz Ayudhya Group Companies to run business efficiently and appropriately, including testing the Company's systems, managing our financial position, business capability, planning, communications, corporate governance, internal audit, and organizational restructuring including data management, record keeping, making copies, or the destruction of personal data;
  • To publicize our activities including communication of information or newsletters;
  • To handle your complaints or maintain business relationship with you

Establishing rights, fighting for, or complying with claims.
  • To conduct investigations, gather facts for establishing claims, litigation, and/or fighting cases in court, disputing, opposing, clarifying complaints, or taking any action related to the company's and/or your claims.

Consent
  • The Company may process sensitive personal data only to the extent necessary for legitimate purposes and within the scope of consent given, unless such processing of sensitive personal data is exempted by law from consent requests

In the event that the Company cannot process sensitive personal data or does not receive enough sensitive personal data, the Company may not perform our duties or service under agreement or your request;

  • For any other purposes where consent is given from time to time e.g. for marketing purpose unless the Company can process for such purposes lawfully under applicable law or personal data protection law.

If you would like to withdraw the consent for disclosure of personal data for marketing purpose, please contact the Company as detailed in section 13.

In this regards, the Company may process the personal data for other purposed as specified by laws such as the prevention or suppression of dangers to your life, body or health (vital interest basis) or where the processing is necessary to carried out for the public interest or for the exercise of public power granted to the Company (public task basis)

In certain cases, documents submitted to the Company may contain sensitive personal data as an incidental component and not as an essential part of the relevant transaction, for example, religion or blood type appearing on a copy of a national identification card. In this regard, the Company neither requires nor intends to collect or process such sensitive personal data for any purpose. If you do not wish to disclose such sensitive personal data, you may delete, redact, or strike through the relevant information prior to submitting the document to the Company, and affix your signature to certify the amendment.

The Company may use technologies currently available or to be developed in the future, including Artificial Intelligence (AI) and Generative AI technologies, such as AllianzGPT, Azure OpenAI, Microsoft Copilot, AI chatbots, and Optical Character Recognition (OCR), to collect, use, disclose, and/or otherwise process your personal data for the purposes of learning, improving, developing, enhancing operational efficiency, and providing services to you. The Company will use such technologies only to the extent necessary and in compliance with applicable laws and will implement appropriate safeguards to protect personal data so as not to unduly affect your rights and freedoms. Should you have any questions, you may contact the Company using the details provided in Clause 13.

4.    Who will have access to your personal data? Or who do we share your personal data with?

Your personal data may be disclosed to the following parties who operate as third-party data controllers or data processors under our instruction as prescribed by laws or in accordance with the aforesaid purposes:

  • Public authorities, regulatory bodies;
  • Allianz Group Companies, Allianz Ayudhya Group Companies;
  • Other contacting parties or financial institution, technical consultants, experts, lawyers, auditors such as cloud/application service providers, document management, rating agencies;
  • Business purchase offerer or business transferee, in the event of any contemplated or actual reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business.

5.    Where will my personal data be processed?

Your personal data may be processed both inside and outside of Thailand by the parties specified in section 4 above, subject always to contractual restrictions regarding confidentiality and security in line with applicable data protection laws and regulations. We will not disclose your personal data to parties who are not authorized to process them.

Whenever we transfer your personal data for processing outside of Thailand by another Allianz Group companies, we will do so on the Binding Corporate Rules (BCRs) of Allianz which establish adequate protection for personal data.

The BCRs and List of Allianz Group companies that comply with the BCRs can be accessed under www.allianz.com/en/privacy-statement.html#bindingcorporaterules

Where the BCRs do not apply, we will instead take steps to ensure that the transfer of your personal data outside of Thailand receives an adequate level of protection as it does in Thailand The Company will implement appropriate protective measures in accordance with personal data protection laws, including announcements, regulations, or subordinate laws.

6.    What are your rights in respect of your personal data?

Where permitted by applicable law or regulation, you have the right to:

  • Access or request a copy of your personal data held about you including disclosure of the acquisition of your personal data;
  • Withdraw your consent at any time where your personal data is processed with your consent;
  • Update or correct your personal data so that it is always accurate, complete and not misleading;
  • Delete, destroy or anonymize your personal data from our records if it is no longer needed for the purposes indicated above;
  • Restrict the processing of your personal dataRestrict the processing of your personal data in circumstances where you have contested the accuracy of your personal data;
  • Object to the collection, use, and disclosure of your personal data in certain circumstances, including the case where personal data is being processed for direct marketing;
  • Obtain your personal data in an electronic format for you or for your new insurers; and
  • File a complaint with us and/or the relevant data protection authority if you believe that there is violation of applicable data protection laws.

You may exercise these rights by contacting us as detailed in section 13.

Your withdrawal of any previously given consent, your request to delete, destroy and anonymize your personal data, your request to restrict or your objection to the processing of your personal data could mean that the Company is unable to perform our obligations under an existing contract with you, and that there may be restrictions on certain transactions or services, which may result in the loss of your privilege or information, and may restrict you from services offered by us.

The Company may refuse to comply with your request in the circumstances where there are legal restrictions, or the Company has compelling legitimate grounds for the processing of your personal data as permitted by applicable laws. The Company reserves the right to charge a reasonable fee to complete your request.

7.    How long is personal data retained for?

We will retain your personal data as long as it is necessary for processing in accordance with aforesaid purposes and continue storing at least ten (10) years from the date of the end of relationship. However, the Company may continue to retain your personal data after such period if it is necessary to store your data longer for the purpose for which it is collected, or for other reasons deemed appropriate e.g. to enforce our legal or contractual rights.

8.    Are cookies used on the Company’s Website?

The Company uses tracking technology such as cookies or tags to gather usage information to understand how visitors use the Company’s Website

Tracking Technology helps us manage and improve the usability of the Company’s Website, for example by detecting whether there has been any contact between your computer and us in the past or to identify the most popular sections of the Company’s website.

When you save your cookie settings, they should also apply to your future visits to the Company’s Website. However, for technical reasons beyond our control of the Company which will impact your setting, for example, if you reset your browser, delete your cookies or access the Company’s Website from another browser or device, your cookie settings may be lost. To comply with applicable laws and regulations, in some countries you may be asked to confirm your cookie settings when you first visit the Company’s Website. If you are in a country where you are automatically required to set your cookie settings, you may be asked to set them again on a future visit.

In many cases you can also control tracking technologies using your browser. Please ensure that your browser setting reflects whether you wish to be warned about and/or accept cookies. The specific capabilities of your browser and instructions on how to use them can usually be found in the manual or help file of your browser.

Refusing, disabling or deactivating of cookies may result in a reduced availability of the services provided by the Company’s Website, or parts of the Company’s Website may no longer function correctly.

9.    How are social media plug-ins used on the Company’s Website?

Swipe to view more

Plug-ins

Operator

Privacy Notice

Facebook

 Meta Platforms, Inc.
1 Hacker Way, Menlo Park, California, U.S.

https://facebook.com/privacy/policy

YouTube

Google LLC, D/B/A YouTube
901 Cherry Ave.
San Bruno, CA 94066, USA

https://policies.google.com/privacy?hl=th

All plug-ins are indicated with the brand names of the respective operators: Facebook,  YouTube ("Operator"). If you interact with the plug-in, e.g. by clicking on the YouTube video, the data will be transferred directly from your browser to the Operator and saved by the Operator.

10. What security measures have we implemented to protect your information collected through the Company’s various channels?

The Company has implemented technical and organizational security measures as required by law to safeguard your personal data collected through the Company’s various channels, including online channels, against unauthorized access, unlawful use, loss, or destruction. Governance over the use of Artificial Intelligence (AI) forms part of these safeguards. In this regard, the Company uses AI in accordance with the Group’s governance framework, internal policies, and relevant international standards, including risk assessments, access controls, appropriate human oversight, and ongoing monitoring and review, to ensure that the processing of personal data complies with applicable personal data protection laws and related regulations.

11.   How do we treat electronic messages sent to and from the Company?

All electronic messages sent to and from the Company are protected by appropriate technical and organizational security measures and may only be accessed in justified cases in line with applicable laws and regulations to specific persons in defined functions (e.g. Legal, Compliance, Risk Management). Every step of the process, as well as the search criteria used, are logged in an audit trail. All information is disposed of after the applicable retention period has expired.

12.   What should you consider when sending data over the Internet?

The Internet is generally not regarded as a secure environment, and information sent via the Internet (such as to or from the Company’s Website or via electronic message) including downloading information or files from the Company’s website, may be accessed by unauthorized third parties, potentially leading to disclosures, changes in content or technical failures. Even if both sender and receiver are located in the same country, information sent via the Internet may be transmitted across international borders and be forwarded to a country with a lower data protection level than in your country of residence.

The Company does not accept responsibility or liability for the security of your information whilst in transit over the Internet to the Company. In order to protect your privacy, you may choose another means of communication with the Company, where you deem it appropriate

13.   How can you contact us?

If you wish to exercise your rights relating to your personal data, you can contact us by phone, email or post via the details specified below:

Allianz Ayudhya Capital Public Company Limited

  • 898, 7th Floor, Ploenchit Tower, Ploenchit Road, Lumpini, Pathumwan, Bangkok 10330
  • During Monday to Friday from 8.30 to 17.00
  • Telephone Number at 02-305-7374
  • Email:  cs@allianz.co.th

If you have any queries about this privacy notice or would like to file complaints relating to personal data protection, you can contact Data Protection Officer at  DPO_Report@allianz.co.th

14.   How often is this notice updated?

We regularly review this privacy notice. We will ensure the most recent version is available on the Company’s Website at https://www.ayud.co.th

The Company may revise or make changes to this privacy notice. In such cases, we will post a notice of those changes on the above website. If a change may significantly affect you, we will notify you about the change via the specified communication channels. The change thereof will be in force for personal data that we collect, use, or disclose after changes have been posted on our website.

This privacy notice is made in both English and Thai language. In the event of any conflict or discrepancy between the Thai and English versions, the Thai version shall prevail.

 

This privacy notice was last updated on 1 April 2026