Privacy Notice

01About This Notice and the Data Controller

MiMA Forklift Thailand Co., Ltd. ("MiMA Thailand", "we", "us" or "our") is the data controller for the personal data described in this notice. This means that we decide why and how that personal data is collected, used and disclosed.

This notice is intended to provide the information required when personal data is collected from you. If a separate notice is provided for a particular activity, such as recruitment, an exhibition registration or a customer contract, that more specific notice will apply together with this notice.

02Scope of This Notice

This notice applies when you:

• visit or interact with our website at mima.co.th;
• submit a website form or request a quotation, product recommendation, brochure, meeting or showroom visit;
• contact us by email, telephone, LINE, social media or another communication channel;
• meet our team at a trade show, demonstration, dealer meeting or other business event;
• purchase, distribute, service or otherwise discuss MiMA products with us; or
• act as a customer, prospective customer, dealer, distributor, supplier, service partner or other business contact.

The website and our services are primarily intended for business users. This notice concerns information relating to identifiable individuals, including employees and representatives of companies.

03Personal Data We Collect

Data you provide directly

Depending on how you interact with us, we may collect:

• Identity and business information: name, company name, job title, department and business sector.
• Contact information: business email address, telephone or mobile number, LINE details, country and contact preferences.
• Enquiry and project information: product interests, load type, capacity, lift height, aisle width, site conditions, preferred visit date, drawings, photographs, technical files and messages you send to us.
• Commercial information: quotation requests, order and delivery information, product configuration, service requirements, warranty enquiries and relevant business communications.
• Event information: meeting requests, attendance details, business card information and follow-up preferences.
• Feedback and correspondence: survey responses, customer-support records and communications with our team.

Data collected automatically

When you use the website, we or our service providers may automatically collect:

• Device and network data: IP address, browser type, operating system, device type, language and general location derived from an IP address.
• Usage data: pages viewed, links and buttons clicked, time and date of access, referring and exit pages, session duration and website errors.
• Campaign data: referral source, campaign parameters such as UTM values and advertising identifiers such as a click ID, where applicable.
• Cookie and preference data: consent choices and information stored or accessed through cookies and similar technologies.

Data obtained from other sources

We may receive business contact information from MiMA group companies, authorised dealers, event organisers, referral partners, public company websites, professional networks and publicly available business directories. Where required, we will inform you of the source and intended use.

04How and Why We Use Personal Data

We collect, use or disclose personal data only where we have an appropriate legal basis. The basis depends on the context and may include your consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation or our legitimate interests where those interests do not override your fundamental rights.

If we ask you to provide information that is required by law or needed to enter into or perform a contract, we will indicate this where appropriate. If you do not provide information marked as required on a form, we may be unable to respond, prepare a quotation, arrange a visit or provide the requested product or service.

Where we rely on legitimate interests, we assess the need for the processing and balance our interests against the possible impact on you. Where we rely on consent, you may withdraw it at any time as described below.

05Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, remember choices, protect forms, understand website performance and, where enabled, measure advertising campaigns. These technologies may collect device, usage and campaign data.

Cookies may include:

• Strictly necessary cookies used for website operation, security, load balancing and privacy choices.
• Analytics cookies used to understand visits and improve content and website performance.
• Advertising and measurement cookies used, with the required consent, to measure campaigns and understand whether an advertisement led to an enquiry.
• Embedded-content cookies that may be set when you play a video or use a service provided by another platform.

Where required, non-essential cookies are not activated until you make a choice through our cookie banner. You can change or withdraw your choice through the website's cookie settings and can also manage cookies in your browser. For details about the cookies currently used, their providers and duration, please read our Cookie Policy.

06When We Share Personal Data

We do not sell or rent your personal data. We may disclose it only where necessary to:

• MiMA group companies: including relevant engineering, manufacturing, sales and support teams where needed to assess an application, prepare a solution, fulfil an order or provide support.
• Dealers and business partners: authorised dealers, service partners, logistics providers or other project partners where they are involved in your request or delivery.
• Technology and professional providers: website hosting, security, backup, form processing, email, CRM, analytics, advertising, IT support, accountants, auditors, insurers and legal advisers.
• Authorities and legal recipients: courts, regulators, law-enforcement bodies or government authorities where disclosure is required by law or necessary to protect rights and safety.
• Corporate transaction parties: professional advisers and potential buyers, investors or successors in connection with a merger, financing, reorganisation, sale or transfer of all or part of our business.

We require service providers that process personal data on our behalf to use it only under our instructions, apply appropriate security and confidentiality measures and comply with applicable data-protection obligations.

07International Transfers

MiMA operates internationally. To respond to technical enquiries, configure products, prepare quotations, coordinate manufacturing or provide aftersales support, personal data may be transferred to MiMA group companies and authorised personnel outside Thailand, including in China. Some of our cloud, communications, analytics and technology providers may also process data in other countries.

Where personal data is transferred outside Thailand, we take reasonable steps to ensure that the transfer is permitted under applicable law and that appropriate protection is in place. Depending on the circumstances, this may include transferring to a country recognised as having adequate protection, using contractual safeguards, obtaining consent after providing required information, or relying on another exception permitted by law.

08How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, reporting, warranty and dispute-resolution requirements. Our usual retention approach is set out below, unless a longer or shorter period is required by law or justified by the circumstances.

When data is no longer required, we delete it, destroy it, anonymise it or securely isolate it until deletion is possible. Backup copies may remain for a limited period and will be protected from ordinary use.

09How We Protect Personal Data

We use reasonable organisational and technical measures designed to protect personal data against accidental or unlawful loss, alteration, disclosure, access, use or destruction. Depending on the system and risk, these measures may include access controls, authentication, encryption in transit, backups, anti-spam controls, software updates, monitoring, staff confidentiality and restrictions on service providers.

No internet transmission or storage system can be guaranteed to be completely secure. You should use appropriate care when sending confidential or commercially sensitive information. If we become aware of a personal-data breach, we will assess it and provide notifications required by applicable law.

10Your Privacy Rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• withdraw consent at any time where processing is based on consent, without affecting processing already carried out lawfully;
• request access to your personal data and obtain a copy;
• request correction of inaccurate or incomplete personal data;
• request erasure, destruction or anonymisation where the data is no longer necessary or is processed unlawfully;
• request restriction of processing in circumstances provided by law;
• object to certain processing, including direct marketing and some processing based on legitimate interests;
• request data portability for data processed by automated means where the legal requirements are met; and
• lodge a complaint with the Office of the Personal Data Protection Committee of Thailand if you believe your data has been handled unlawfully.

To exercise a right, email sales@mima.co.th and describe your request. We may ask for information reasonably necessary to verify your identity or authority and to locate the relevant records. We will use verification information only for handling the request and related security or legal purposes.

Rights are not absolute. If we cannot fulfil all or part of a request, we will explain the reason where the law permits. You can find information about Thailand's supervisory authority at www.pdpc.or.th.

11Direct Marketing and Your Choices

We may send relevant B2B communications about MiMA products, services, events or solutions where permitted by law. You can object to or opt out of direct marketing at any time by using the unsubscribe method in the message or by emailing sales@mima.co.th. We may keep limited information on a suppression list so that we can respect your preference.

Opting out of marketing does not prevent us from sending non-marketing communications needed to respond to an enquiry, administer an order, provide service or comply with legal obligations.

12Children's Personal Data

Our website and services are intended for businesses and are not directed at children. We do not knowingly request personal data from children through the website. If you believe that a child has provided personal data to us without the consent or authority required by law, please contact us so that we can review and take appropriate action.

13Third-Party Websites and Services

The website may link to or embed services operated by third parties, such as LINE, video platforms, social networks, maps or external websites. When you choose to use those services, the third party may collect personal data under its own privacy notice. We do not control third-party websites or their independent processing practices, and we encourage you to review their privacy information before providing data.

14Changes to This Privacy Notice

We may update this notice to reflect changes in law, technology, our website or our business practices. The latest version will be published on this page and identified by the "Last updated" date. If a change materially affects how we use personal data, we will provide additional notice where required.

15How to Contact Us

If you have a question about this notice, want to exercise a privacy right or wish to raise a concern about how we handle personal data, contact us using the details below.