Personal Data Privacy Notice

The Personal Data Privacy Notice of Aionex (hereinafter referred to as the “Privacy Notice”) aims to explain how Aionex Co., Ltd. and/or its affiliates (hereinafter referred to as “We”, “Our” or “Us”) collect, use and share personal information obtained from users (hereinafter referred to as “the Users”, “You” or “Your”) of our applications and services (hereinafter referred to as “the Services”) and in order for You to ensure that We will protect and manage Your Personal Data (as defined below) in accordance with applicable laws concerning Personal Data protection, We hereby established this Privacy Notice for Your acknowledgement of details of the processing of the Personal Data, whether it be the collection, use and disclosure (collectively referred to as the “Processing”) that may be occurred and to inform You of the rights You may have on Your Personal Data and Our contact channels. This Privacy Notice therefore explains what kind of Personal Data We will be collecting, how we will use and provide such Personal Data, and how you can manage the Personal Data.

For the purpose of this Privacy Notice, “Personal Data” means any information relating to an individual, which enables the identification of such individual, whether directly or indirectly, as defined in the Personal Data Protection Act B.E. 2562 (2019) and relevant data protection laws (“Personal Data Protection Laws”) and also as listed below. According to the Personal Data Protection Laws, AIONEX is a “controller” of Your Personal Data, which means Aionex decides why and how it is processed, and we (more specifically, Aionex’s affiliates) are a “processor” assigned by Aionex. It also means We are responsible for the Processing, which extends to those of Our subcontractors who process Your Personal Data based on Aionex’s instructions. We collect Personal Data from You that is necessary for Us to either provide You with the Services you’ve requested, to comply with statutory or contractual requirements or any other pertinent purposes in the course of Our business operation. Please note that if You’re unable to provide certain Personal Data which is necessary for Us to provide the Services to You or as required by law or the contract, We may not be able to provide You with the Services. Additionally, this may affect compliance with any laws that we or you are obligated to comply with.

Services provided by third parties shall follow their own privacy policies, such services shall be expressly listed in this Privacy Notice.

We reserve the right to amend the Privacy Notice at any time for the purpose of complying with laws or improving the Services or for other reasons. As such, We would advise You check the latest version of the Privacy Notice from time to time. In any event, if you continue to use the Services, You are deemed to have agreed to the Privacy Notice including any amendments made by Us.

Please read this Privacy Notice carefully to understand why and how we collect, use, and/or disclose your Personal Data.

Information Collected by Us

Information Collected During Account Creation

You may register an account through websites, platforms and systems supported by Us. We will ask you to provide information such as your name, email address, phone number, billing address, and date of birth. Please make sure that the information you provide is true, accurate, and authentic as it will be used for user account management for purposes such as to avoid the abusive or fraudulent use of the Services. We may communicate important information about the Services to you through the contact information you have provided.
We reserve the right to delete, suspend or take other necessary management measures on ant account registered with false information. We will not be liable for any deletion, suspension, failure to have immediate access to important information or other damages resulting from the provision of false information.

Information Collected During the Use of the Services

When you use the Services, we will collect information on your use of the Services and your activities throughout the Services using our mobile application. Information we collect includes but not limited to:

Time and date when the Services are used;
Your location;
Type and related information of your mobile device;
Type of mobile operating system and its version;
Battery-related information: battery health and battery usage;
Vehicle-related information: VCU number, ODO mileage;
The Services viewed or used by you; and
Record of information exchange with a time stamp.

When you use the Services, we will collect the aforesaid information on the user, including but not limited to riding distance (ODO mileage from battery record). Such information will be used for purposes such as analytics, consumer driving behaviors study, market research, and enhancement of the Services.

We may also use other similar methods (defined as follows) to record information related to you for the enhancement of the Services and for market analysis purposes. Information obtained through the following methods will be de-identified first:

Error Report: You may voluntarily upload an error report on the use of the Services or on other devices as the basis for our analysis and enhancement of user experience of the Services.
Usage Information: We will collect information on your use of the Services, such as battery usage and riding distance, for market analysis purposes.

Other Information Collected by Us

To enhance your experience in using the Services, we offer some additional features. If you choose to use these features, we may ask you to provide the following information:

Mobile Phone Number [Required]

We may collect your contact information such as your mobile phone number depending on the membership management requirements of the country or region you reside. We may use SMS messages to inform you of various product information or promotional events provided by us.

Date of Birth [Required]

We may collect some of your basic information such as your date of birth depending on the membership management requirements of the country or region you reside.

Profile Picture [Optional]

You may voluntarily upload a profile photo or picture to the Services for your own identification and experience using the Services. This information is not required to use the Services and will not be made public.

Product or Service Feedback [Optional]

You may voluntarily submit your valuable feedback and recommendations for the Services or other matters using the options and channels provided by the Services.

Usage and Transaction History [Required]

We will collect your usage and transaction history to calculate and settle the battery service fees or other related fees or charges related to your use of the Services.

Credit Card Information [Optional]

If you choose to use credit card as your payment instrument, you may record your credit card information. We will transfer your credit card information to a third-party payment service provider for processing. Our third-party supplier “2C2P (Thailand) Co., Ltd.” will help you process orders, deposits and payments. Please see https://2c2p.com/privacy for more details.

Location Information [Optional]

The Services will share location information with Google Map and Apple App to display nearby Aionex Energy Stations near a specific location or plan directions to a specific Aionex Energy Station of your choice. Such function requires you to provide your current location and other relevant information, such as start pointing and destination, setting preferences, map, and relevant authorization and information. If you do not wish to share location information or related personal information, you may choose to disable the location services from your mobile device settings; however, once location services are disabled, the access to or performance of certain features such as map and navigation, smart vehicle unlock, and parking location may be affected.

Information Collected by Third Parties

We provide some functions of the Services by linking to third-party programs. Third-party programs may through the Services collect specific information on you, your device, and your use of the Services.
We have no control on third-party programs or on how third-parties collect, use or protect your data. You acknowledge that we are not responsible for the content, functions, accuracy, legality, appropriateness or any other aspect of the third-party programs or content thereof, and that we shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on anything on the third-party programs or content thereof. The Privacy Notice does not apply to third parties. We encourage you to review the privacy policies of the third parties to understand how they collect, use or protect your information.
You may choose to refuse to provide your information to third parties; however, this may block access to some or all of the functions of the Services as the Services are provided in collaboration with third parties. If you continue to use the Services, you are deemed to consent to the aforementioned processes and conditions.
In some cases, we may receive your Personal Data and information from third parties or other sources such as our Partners, affiliates, service providers or government sectors where such source has the right to disclose your personal data as permitted by laws. If you have previously consented to the disclosure of information to such third parties, we encourage you to read the privacy policies of such third parties to ensure that you understand the guidelines and practices for the protection of Personal Data of such third parties. However, if you have any questions or do not want to receive information, notifications, sales or services promotion of such third parties, please contact the said third party directly.
In this regard, by reading and being informed of the Privacy Notice, you hereby understand and acknowledge that we share or disclose your Personal Data to relevant persons/third parties for the purposes as specified in this Privacy Notice and in compliance with applicable laws and regulations. You may read the privacy policies of those third parties to learn more about how they collect, use or disclose your Personal Data and information.

How We Use Your Information

We may use information collected from you to:

Conduct customer surveys;
Conduct data analysis on users’ driving habits;
Respond to customer feedback, inquiries, and provide customer services;
Provide personalized and customized content of the Services;
Protect, investigate and curb fraudulent, unauthorized or abusive use of the Services or other illegal activities;
Mark information and contents you upload or share to the Services;
Collect the usage, relevant statistics, and user opinions related to the use of the Services for the enhancement and update of the Services or products;
Provide you with information about our products, related events and activities, and important information about the Services;
Link, combine, or integrate with other information obtained by third parties to enhance the Services;
Send the information you have selected to other users of the Services;
Comply with applicable laws and fulfill legal obligations.

Personal Information Shared by You

We do not encourage sharing any personal information or account information with anyone else. If you choose to share or disclose any personal information, account information, or information related to your user identification and payment information, please keep in mind of your privacy needs and the risks and consequences of such behaviour. You agree to take full responsibilities, including but not limited to, any and all activities and purchases that occur under your account. We are not responsible for any security issues arising from such behaviour.

Storage and Transmission of Personal Information

You understand and acknowledge that when you agree to provide your personal data to us, your personal data may be transferred, stored, used or processed to and/or by our affiliated companies and any of its service providers who may be located in a different country or region from where you reside. Since data processing and storage are completed through the cloud services provided by third-party service providers, the servers may be located in other countries. By continuing to use the Services, you agree that your information may be transmitted out of the country and that we may process and store your information collected in a country other than the country of submission. Since no electronic transmission or data storage methods are perfect, we cannot guarantee that your information is 100% secure or not attacked in the process of transmission or storage.

However, in cases where that the destination country does not have sufficient Personal Data protection standards, the transfer of such Personal Data will comply with exceptions as prescribed by Personal Data Protection Laws or any applicable laws, regulations, and the Privacy Notice except in the circumstance where your consent has been obtained, provided that you have been informed of the inadequate Personal Data protection standards of the destination country.

How Long We Retain Your Information

Your information will continue to be retained for as long as your account is active or valid. In the following circumstances, your information will continue to be retained after your account is deleted or suspended:

To comply with laws, regulations, or public interests;
To fulfill the purposes of necessary performance of our obligations or business needs;
To investigate any improper use or abuse of the Services detected;
To use as important data for the enhancement and updates of the Services, provided that such data will be de-identified first.

Children’s Information

The Services is not designed for children (under twenty-year-old). We do not ask or collect personal information from or about children. If we become aware that we have collected any personal information on children, we will make reasonable effort to delete such information as soon as possible. You may also ask us to remove such information through the options designed in the Services or through the contact information specified in the Privacy Notice.

Information Security

We are committed to ensuring the security of personal information. Without your consent, we will never provide your personal information to any third party not related to the Services. It is advised that you keep your account and login information including but not limited to account ID and password confidential and do not share them with anyone else.

To protect the privacy and security of our members, we have adopted the following security mechanisms:All API designs and websites are subject to encrypted connection to ensure the security of data between users and websites;
All data are transmitted using HTTPS under SSL authentication;
Use access token with a fixed lifecycle to confirm the identity of the user;
Maintain data integrity and correct access permissions through integrating third-party services for access management and control; and
Regularly detect network intrusion and data theft.

To protect your privacy and security, we will strive to ensure the security and integrity of the system and data operations, to prevent external attacks and intrusions, and to safeguard the security of all personal information with reasonable technology and procedures. If it is necessary to entrust our affiliates to provide the Services due to business needs, we will request them to strictly fulfill confidentiality and implement necessary inspection procedures to ensure their compliance.

Exercise of Rights and Contact Information

You have the right to request access, to rectify, to delete or to restrict the processing of your personal information or exercise other similar rights pursuant to the Personal Data Protection Act or other similar laws applicable to your country or region. If you would like to exercise your rights as set out in this Privacy Notice, of if you have any questions about the Privacy Notice or the implementation of the Privacy Notice, please contact us through the options designed in the Services or through the following contact information (hello@aionex.io).

As the owner of personal data, you have the rights as prescribed in the Personal Data Protection Laws. In this respect, you can request to exercise your relevant rights through the channels specified by us, whereby you will be entitled to exercise the rights when the laws concerning personal data protection are applied to us. In this respect, your relevant rights shall have details as follows:

Right to withdraw consent

In case that we request for your consent, you shall have the right to withdraw the consent for the processing of your personal data that has already given to us unless such withdrawal of consent is restricted by laws or by the agreement that provides you the benefits.

Such withdrawal of consent shall not affect the processing of personal data legally conducted according to your prior consent. Please note that if you do this, it may impact our ability to provide the Services to you. In this regard, you agree that if we are unable to provide you with the Services which are specified in any agreement between you and us due to your withdrawal of your Personal Data specified herein, we shall not be considered as the default party in such agreement. You shall not claim for any loss, compensation, and/or damages in relation to such agreement.

Right to access to personal data

You have the right to request for an access to and the request for the copy of your personal data under control by us, including to request us to disclose the acquisition of such data that you have not given consent to us.

Right to request for the submission or the transfer of personal data

You have the right to request us to transfer your personal data that you have given to us as prescribed by laws. Please note that this right only applies to Personal Data which you have provided to us.

Right to object the collection, use or disclosure of personal data

You have the right to object to the processing of data relating to you in respect of the collection, use or disclosure of your personal data as prescribed by laws. There may be circumstances where you object to, or ask us to restrict, our processing of your Personal Data but we are legally entitled to continue processing your Personal Data and/or to refuse that request to comply with a legal obligation.

Right to request for the erasure of personal data

You have the right to request us to delete your personal data as prescribed by laws. Nevertheless, we may store your personal data using electronic system pursuant to which some systems may be unable to delete the data, and for such case, we shall destroy or cause such data to be unable to identify your identity. Please note that there may be circumstances where you ask us to erase your Personal Data, but we are legally entitled to retain it to comply with a legal obligation.

Right to request the restriction of the use of personal data

You have the right to request us to restrict the use of your personal data as prescribed by laws.

Right to request for the rectification of personal data

If you find that the data controlled by us is incorrect or you have changed your personal data, you have the right to request us to correct your personal data so that such personal data be accurate, current, complete and not causing misunderstanding.

Right to lodge a complaint

You have the right to lodge a complaint with the competent officers under the Personal Data Protection Act B.E 2562 (2019) in case that we breach or do not comply with such Act.

Response to Your Request: For security purposes, you may need to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request. This is to ensure that your data is protected and kept secure. You can contact us according to the ways as abovementioned.

We would not respond to your request if it is:

Related to the fulfilment of obligations stipulated by laws and regulations by the data controller;
Directly related to national security and national defense security
Directly related to public safety, public health and major public interests
Directly related to criminal investigation, prosecution, trial and execution of judgments
The data controller has sufficient evidence to identify that the subject of Personal Data has subjective malice or abuse of rights
Responding to the request of the Personal Data subject may cause serious damage to the legitimate rights and interests of the Personal Data subject or other individuals and organizations.