wisesight logo
messenger icon
1. Introduction 2. Personal Data Processed by the Company 3. Personal Data Protection Principles 4. Data Protection Officer (DPO) 5. Rights of Data Subjects 6. Complaints and Contact Channels 7. Review and Amendment

1. Introduction

Wisesight (Thailand) Co., Ltd. is a provider of data technology and data analytics services, offering platforms and services relating to social listening, customer engagement, analytics, research and insights, trend analysis, influencer discovery, and AI-enabled solutions, to enable organisations to collect, process, analyse, and present data from public sources and other lawful data sources for use in business decision-making, operations, and research.

The Company may act as a Data Controller, a Data Processor, or in differing roles across individual processing activities under the same product or service, depending on the purpose of the processing, the facts of the activity, and the allocation of roles under the relevant contract or privacy notice.

This Policy is made to set out the principles, practices, governance structure, and responsibilities for the protection of personal data of Wisesight (Thailand) Co., Ltd. (hereinafter referred to as the "Company" or "Wisesight") in accordance with the Personal Data Protection Act B.E. 2562 (2019) (the "PDPA") and the relevant subordinate legislation, as well as the international standards applicable to the Company's business.

This Policy applies to:

  • All processing of personal data carried out by the Company, whether in the capacity of Data Controller or Data Processor.
  • All products and services of the Company, including but not limited to Zocial Eye, Warroom, Influencer Directory, Brand Scan, Virtual Persona, Wisesight AI, Monitoring & Alert, Command Center, Omnichannel Solution, Research, and Trend.
  • Affiliated companies that process personal data under the control of, or jointly with, the Company, namely: (hereinafter collectively referred to as the "Affiliated Companies").
  • Directors, executives, employees, workers, contractors, sub-processors, and any person who processes personal data on the instructions of, or on behalf of, the Company.

2. Personal Data Processed by the Company

The Company summarises the categories of personal data it processes at an overview level as follows; specific details appear in each activity-specific privacy notice.

  • Public data from social media — usernames, public profiles, posts, comments, images, videos, metadata, engagement, network data.
  • Data inferred by AI and analytics — sentiment scores, topics, intent, demographic classification, predictions, vectors, synthetic profiles.
  • Data submitted by clients for processing — End User customer data, contact content, service history.
  • Platform user account data — name, email, password, 2FA, position, profile image, settings.
  • Usage and telemetry data — login records, IP, device, browser, clickstream, search queries, uploads/downloads.
  • Authentication, security, and audit data — session tokens, API keys, audit trails, security logs, traffic data.
  • Business counterparty data — data of clients, partners, vendors, shareholders, contact persons.
  • Employee and employment data — personal history, qualifications, salary, health, criminal records.
  • Marketing and events data — event attendee data, newsletter recipients, engagement history.
  • Website and cookie data — session cookies, analytics cookies, marketing cookies.
  • CCTV image data — still and moving images from areas covered by cameras.

3. Personal Data Protection Principles

  • The processing of personal data shall be lawful, fair, and transparent to the data subject (Lawfulness, Fairness and Transparency).
  • The processing of personal data shall be carried out within the scope of the purposes determined by the Company, being purposes that are explicit and legally effective, and no data shall be processed in a manner incompatible with, or contrary to, such purposes (Purpose Limitation).
  • The processing of personal data shall be adequate, relevant, and necessary in relation to the purposes of such processing (Data Minimization).
  • The processing of personal data shall be accurate, and the data shall be kept up to date where necessary, with appropriate steps taken to ensure that inaccurate data is corrected (Accuracy).
  • Personal data shall be retained only for the period necessary for the processing of such data (Storage Limitation), except where the law requires the Company to retain personal data for longer than such necessary period.
  • The processing of personal data shall be subject to appropriate security measures, including protection against unauthorised or unlawful processing, and against accidental loss, destruction, or damage (Integrity and Confidentiality).

4. Data Protection Officer (DPO)

The Company has appointed a Data Protection Officer pursuant to Section 41 of the PDPA to provide advice, monitor compliance with the law, coordinate with the Office of the Personal Data Protection Committee (PDPC), and receive complaints from data subjects.

DPO contact details:

  • Email: dpo@wisesight.com
  • Address: 123 Suntowers Building B, 33rd Floor, Unit B3301–3304, Vibhavadi Rangsit Road, Chomphon Sub-district, Chatuchak District, Bangkok 10900
  • Telephone: 022741299

5. Rights of Data Subjects

Under the PDPA, data subjects have the following rights; the details and procedures for exercising each right appear in the relevant privacy notice:

  • Right to be informed. The Company will provide a "Privacy Notice" containing clear details of the purposes of processing, together with a "Cookie Policy" setting out the categories of cookie technologies the Company uses and the purposes of using such cookie technologies; and in the event that the Company processes data other than in accordance with those purposes, or outside the scope of any consent given, the Company will notify and/or seek consent from the data subject before processing personal data outside such purposes.
  • Right to withdraw consent. The data subject may withdraw consent previously given to the Company at any time.
  • Right of access. The data subject may request access to his or her personal data and a copy of the personal data processing activities, and may request that the Company disclose how such data was obtained.
  • Right to rectification. The data subject may request the correction of inaccurate personal data so that such data is accurate, up to date, and not misleading.
  • Right to erasure. The data subject may request that the Company delete or destroy personal data, or render personal data anonymous such that the data subject can no longer be identified.
  • Right to data portability. Where the Company's data systems support reading or use by generally available automated tools or devices, and the personal data can be used or disclosed by automated means, the data subject may request a copy of his or her personal data, request the automatic transfer of such data to another data controller, and request to receive the personal data so sent or transferred.
  • Right to restriction of processing. The data subject has the right to request that the Company restrict the use of personal data.
  • Right to object. The data subject may object to the processing of personal data.

Channels for Exercising Rights

Data subjects may exercise the above rights through the following channels:

6. Complaints and Contact Channels

  • Internal channel — data subjects may lodge complaints with the Company directly through the DPO via the channels specified.
  • Government channel — where a data subject is dissatisfied with the Company's handling of a matter, or wishes to lodge a complaint directly with a government authority, the data subject may contact: Office of the Personal Data Protection Committee (PDPC). Address: 7th Floor, Ratthaprasasanabhakti Building, The Government Complex, 120 Moo 3, Chaengwattana Road, Thung Song Hong Sub-district, Lak Si District, Bangkok 10210. Telephone: 02-142-1033. Email: saraban@pdpc.or.th. Website: https://www.pdpc.or.th

7. Review and Amendment

  • Review — The Company will review this Policy at least once a year, or upon a change in law, in PDPC guidance, or a material change in the business.
  • Amendment — The Company will announce amendments to employees and affected data subjects through the Company's website and appropriate internal channels.
  • Effectiveness — Amendments take effect on the date of announcement or the date specified in the announcement, whichever occurs later.

We use cookies

We use three types of cookies; necessary cookies, functional cookies, and analytics cookies to improve your website browsing experience, but these cookies are not directly identifiable you as a person. To receive the most relevant offers and benefit, please click the "allow" button for targeting cookies. Learn more about our Cookie Policy.

Change Preferences
allow us