Policies and requirements
Personal Data Protection Policy
Definitions
Personal data means information about an individual that makes it possible to identify that individual, directly or indirectly. This excludes information about deceased persons.
Respecting the Right to Privacy
1. The company respects and values the right to personal data and its protection, and recognizes that data subjects wish to have security in providing information to the company.
2. Personal data received by the company that can identify the individual data subject and is complete, accurate, up-to-date, and of high quality will only be used for the company’s operational purposes. The company will implement strict measures to maintain security and prevent unauthorized use of personal data.
Collection of Personal Data
1. In collecting and storing personal data, the company will use lawful methods and will collect and store personal data only as necessary under the purposes specified in this policy.
2. Personal data collected includes: title, first name, last name, gender, date of birth, religion, nationality, marital status, criminal record, start date of employment, address, contact number, email, national identification number, bank account number, financial information, education and training information, work experience and performance evaluation information, employee ID, health information, social security number, and driver’s license. 1. Taxpayer identification number, photographs, videos, emergency contact information, fingerprints, facial recognition, website access data (log files), and cookie ID.
2. The company will obtain consent from the data subject before or during data collection, except in the following cases where consent is not required:
To comply with laws, regulations, rules, contractual obligations, and necessary conditions for providing the company’s services.
For the benefit of the data subject’s life, health, or safety.
For the company’s legitimate interests.
3. The company will not collect your personal information relating to health history, religion, fingerprints and facial recognition, criminal history, or information that may result in discrimination or reputational damage to the data subject, and will not use personal information for promotional purposes, sales promotions, or sales data analysis to develop products and services, unless written consent is obtained from the data subject.
4. The company will collect personal information directly from the data subject and may collect personal information from other sources only in the following cases:
The data subject has been notified of the collection of personal information from other sources, and
consent has been obtained from the data subject, or in cases where the collection of personal information is exempt from the consent requirement under point 3, or the information is public.
6. The company stores personal data in paper format and in computer systems, including the cloud, with restricted access to such data.
7. The company retains personal data for a maximum of 10 years from the date of termination of employment or the date of termination of duties according to law or regulatory requirements, except for commercial data, which will be retained indefinitely for the company’s operations.
8. After the retention period has expired, the company will destroy the personal data by destroying copies of documents or deleting electronic data.
Purposes of Collecting Personal Data
1. The company collects personal data for the following purposes:
To comply with laws, regulations, requirements, contracts, and necessary conditions for the operation and management of the company.
- For the benefit of the life, health, or safety of the data subject.
- For the legitimate interests of the company.
- For the company’s marketing activities.
- For the benefit of improving the quality of the company’s services.
- For investor relations activities.
- For evaluating the abilities of employees and job applicants.
- For managing employee compensation or other benefits.
2. The company will not perform any actions different from those stated in the purposes of data collection, unless the new purpose has been notified to the data subject. and has obtained consent from the data subject (as applicable).
3. If there is a subsequent change in the purpose of collecting personal data, the company will inform you and request your consent (as applicable).
Processing of Personal Data
1. The company may use or disclose personal data only with your consent and only for the purposes outlined in this policy, except:
To comply with laws, regulations, rules, contractual obligations, and the company’s terms of service.
For the benefit of the life, health, or safety of the data subject.
For the legitimate interests of the company.
When necessary to comply with the law, to assess the work ability of employees, labor protection, and social security.
2. The company may need to disclose personal data to affiliated companies or government agencies as required by law, such as the Revenue Department, the Department of Labor Protection and Welfare, the Social Security Office, banks, etc.
3. In cases where the company hires other companies or agencies to process personal data, such as statistical data analysis, updating and maintaining database systems, etc., the company has stipulated that such hired companies or agencies maintain the confidentiality and security of personal data. Before disclosing personal data to those companies, the company will enter into an agreement prohibiting the use of personal data…
Data Security
The company recognizes the importance of maintaining the security of personal data. Therefore, it has established appropriate security measures for personal data, consistent with the confidentiality of personal data, to prevent loss, unauthorized access, destruction, use, alteration, modification, or disclosure of personal data without legal right or in accordance with the company’s information technology security policy and guidelines.
Rights of Data Subjects
1. Right to Withdraw Consent
Data subjects have the right to withdraw their consent to the processing of their data, including any data subject’s rights, at any time while the personal data is held by the company.
2. Right to Be Informed
Data subjects have the right to be informed about their information, the purpose of data processing, their rights, or any actions taken regarding their personal data.
3. Right to Access Personal Data
Data subjects have the right to access their own personal data and request the company to provide them with a copy of such data. They may also request the company to disclose how it obtained personal data without their consent.
4. Right to Correct Personal Data
Data subjects have the right to request the company to correct inaccurate data or add incomplete data.
5. Right to Delete Personal Data
Data subjects have the right to request the company to delete their data for certain reasons.
6. Right to Prohibit the Processing of Personal Data
Data subjects have the right to suspend the use of their personal data for certain reasons.
7. Right to Transfer Personal Data
Data subjects have the right to transfer their personal data provided to the company to another data controller or to themselves for certain reasons.
8. Right to Object to the Processing of Personal Data
Data subjects have the right to object to the processing of their personal data for certain reasons.
9. Right to File a Complaint if They Believe Their Rights Have Been Violated by the Company or Its Officers or Agents
Data subjects have the right to file a complaint with the committee appointed under Section 5 of the Personal Data Protection Act B.E. 2563 (2020).
Data subjects can inform company officers of their above-mentioned intentions.
However, if the exercise of the data subject’s rights affects the company’s necessary activities and/or the data subject is unable to provide a suitable reason, the company has the right to refuse the request to exercise such rights.
Furthermore, the company may charge fees for such actions from the person notifying the intention.
Changes to the Personal Data Policy
The company may update this privacy policy from time to time to reflect changes in services, company operations, and feedback from data subjects. The company will clearly announce any changes before implementing them, or may send a notification directly to data subjects.
Contact Information
For further inquiries or to express your intention to exercise your rights as a data subject, please contact the company at:
Alla Public Company Limited
Secretary of the Personal Data Protection Working Group
933, 935, 937, 939 Soi On Nut 46, On Nut Road, On Nut Subdistrict, Suan Luang District, Bangkok 10250, Thailand
Tel: 02-3220777
Fax: 02-3221891
Email: legal@alla.co.th
Cookie Policy
This website is provided by Alla Public Company Limited and Onvalla Company Limited. This website uses cookies and other tools to help distinguish your browsing patterns from other users, providing you with a better website experience and helping to improve the quality of the website. By continuing to use this website, you consent to the installation of cookies on your computer.
What are cookies?
Cookies are small pieces of text containing downloaded data that may be stored in your web browser or other internet-connected device (such as your computer, smartphone, or tablet), which can be retrieved later by the server, similar to the memory used to store a web page.
How cookies work: They help automatically collect and store the following information about your website visits:
Internet domain and IP address from where you accessed the website.
Type of browser software, as well as the structure and operating system used to access the website.
Date and time you accessed the website.
The web pages you visited and where you left the website, including the content on the web pages you visited and the duration of your visit.
Cookie Usage
The types of cookies used and their application are listed below:
Strictly Necessary Cookies: These cookies are essential for the website’s operation, including those that allow you to access information and use the website securely.
Analytical/Performance Cookies: These cookies help remember and count the number of visitors to the website, as well as understand their browsing behavior, in order to improve the website’s quality and suitability. They also collect statistical data on how users access and browse the website, which helps improve the website’s functionality by making it easier for users to find what they need, understanding user interests, and measuring the effectiveness of advertising.
Functionality Cookies: These cookies are used to remember you when you return to the website, allowing us to personalize content for you, tailor the website to your needs, and remember your settings such as language, region, or font size.
Targeting Cookies: (This refers to cookies used for targeting specific audiences.) Cookies: These cookies record your visits to the website, the web pages you have visited, and the links you have accessed. This information is used to personalize the website and any content appearing on the web pages to better match your interests. This information may also be shared with third parties for similar purposes.
Advertising Cookies: These cookies remember your settings when accessing the website and use this information to personalize the website and present advertisements that are most relevant to you. For example, displaying advertisements for products you are interested in, preventing or limiting the number of times you see the same advertisement repeatedly, and helping to measure the effectiveness of advertising.
Please note that some types of cookies on this website are managed by third parties, such as advertising networks, features like videos, maps, and social media, and other external website providers such as website analytics services. These cookies are often analytical/performance measurement cookies or cookies for targeting specific audiences. You should review the cookie policy and privacy policy on the third-party website to understand how they may use your information.
Cookie Settings
You can block cookies by configuring your browser. You may refuse the installation of all or some types of cookies. However, please be aware that if you configure your browser to block all cookies (including those necessary for functionality), you may not be able to access all or some websites.
Whenever you wish to revoke your consent to cookie usage, you will need to configure your browser to delete cookies for each browser you use.
For more information on how to do this, please select the “Help” section in your internet browser for more detailed information.
Personal Data Processing Notice
(Privacy Notice)
Alla Public Company Limited and its subsidiary, Onvala Company Limited, recognize the importance of your personal data entrusted to the company by you. The company is required to comply with the Personal Data Protection Act B.E. 2562 (2019) to ensure the protection of individuals’ rights regarding the collection, use, disclosure (“processing”) of their personal data. This document aims to inform you of the methods used and disclosed regarding your personal data. The company requests that you read this document to understand the purposes for which the company collects, uses, and discloses your personal data.
1. Purposes and Basis for Data Processing
The company collects your personal data for the following activities:
To comply with laws, regulations, requirements, contracts, and necessary conditions for the operation and management of the company.
- For the benefit of the life, health, or safety of the data subject.
- For the legitimate interests of the company.
- For the company’s marketing activities.
- To improve the quality of the company’s services.
- To conduct investor relations activities.
- To assess the capabilities of employees and job applicants.
- To manage employee compensation or other benefits.
2. Basis for Data Processing
The company processes your personal data on the following basis:
– Contract basis: You are required to provide personal data to the company for the purpose of entering into contracts and performing contractual obligations. Failure to provide personal data would result in the company being unable to communicate with you, unable to achieve the objectives of the contract, unable to verify the work aligned with the contract, unable to verify your ability to perform the contract, and unable to verify your identity, as per Section 24 (3) of the Personal Data Protection Act B.E. 2562 (2019).
– Consent basis: The company may collect your health data, fingerprints, and facial recognition data (biological data) for processing to determine your eligibility as an employee, record work hours, and perform contractual obligations with clients. This also includes collecting general data for marketing activities, improving product and service quality, and investor relations activities. If you wish to withdraw your consent, you can contact the company and state your intention as per Clause 4. However, because this data is crucial for employee selection, timekeeping, and contractual obligations with clients, if you withdraw your consent, the company has the right to refuse to hire you or refuse to calculate your working hours.
– Legitimate Interest: The company may use your personal data for processing in order to communicate and conduct business operations, fulfill the obligations between employers and employees, ensure the safety of life and property, and act in the interest of shareholders, which is a case of necessity for legitimate interests under Section 24 (5) of the Personal Data Protection Act B.E. 2562 (2019).
– Legal Obligation: The company may use your personal data for processing in order to comply with governing laws, such as the Securities and Exchange Act B.E. 2535 (1992), the Anti-Money Laundering Act B.E. 2542 (1999), labor protection laws, and other laws under the regulations governing the submission of personal data, such as the Civil Procedure Code, which empowers the court to order parties to submit documents or information in court proceedings, etc., which is a case of compliance with the law under Section 24 (6) of the Personal Data Protection Act B.E. 2562 (2019).
3. Personal Data to be Processed and Data Collection Period
List of personal data processed by the company: Title, First Name, Last Name, Gender, Date of Birth, Religion, Nationality, Marital Status, Criminal History Start date, address, contact number, email, national identification number, bank account number, financial information, educational and training information, work experience and performance evaluation data, employee ID, health information, social security number, driver’s license, tax identification number, photographs, videos, emergency contact information, fingerprints, facial recognition, website access data (log files), and cookie ID. This data will be retained for a maximum of 10 years from the date of termination of employment or the termination of duties as required by law or regulatory authorities, except for commercial data, which will be retained indefinitely for the company’s operations.
After the aforementioned period, the company will delete or anonymize personal data.
Note: Sensitive data on identification documents, such as religion, race, and blood type, can be concealed. If you submit documents without concealing this information, the company will conceal it itself, and it will not be considered that the company has received sensitive data from the data subject.
4. Types of individuals or entities that may receive personal data
The company may disclose personal data to third parties only as necessary to fulfill its primary objectives or objectives related to personal data processing. The company may send your data to affiliated companies or groups of companies, client or business partners, regulatory agencies, and government agencies. Or the agency responsible for oversight, such as the Office of the Commission.
The Securities and Exchange Commission, the Office of the Auditor General, the Anti-Money Laundering Office, the Consumer Protection Board, the Royal Thai Police, the Ministry of Justice, the Revenue Department, the Ministry of Labour, financial institutions, the Social Security Office, or any other person that the company is required to disclose to the extent required by relevant laws or regulations, or as ordered by a court.
5. Rights of the Data Subject
You have the following rights:
(1) The right to withdraw your consent for the company to process your personal data.
(2) The right to access and receive a copy of the personal data that the company has collected, used, and disclosed.
(3) The right to request the transfer of your personal data.
(4) The right to object to the processing of your personal data.
(5) The right to request the deletion, destruction, or anonymization of your personal data.
(6) The right to suspend the use of your personal data.
(7) The right to request correction of your personal data to be accurate, current, complete, and not misleading.
(8) The right to file a complaint if you believe that the company or its officers or agents have violated your rights under the Personal Data Protection Act B.E. 2562 (2019).
Any request to exercise your rights as stated above must be made in writing. The company will make its best efforts to process the request within a reasonable timeframe, not exceeding the legally prescribed period. The company will comply with all legal requirements regarding your rights as a data subject.
In exercising the aforementioned rights, the company reserves the right to charge any fees related to and necessary for processing your personal data as requested.
6. Amendments to the Privacy Notice
In accordance with the Personal Data Protection Act B.E. 2562 (2019), this Privacy Notice may be amended from time to time. The current version will be displayed on the company’s website.
Therefore, Alla Group Public Company Limited and Onvalla Company Limited recommend that data subjects read the Privacy Policy every time they use the services or conduct any activities with the company. This policy can be viewed on the websites www.alla.co.th and www.onvalla.com or other channels as applicable.
7. Details of the Data Protection Authority
For further inquiries or to express your intention to exercise your rights as a data subject, please contact us. Please contact:
Alla Public Company Limited,
Secretary of the Personal Data Protection Working Group
933, 935, 937, 939 Soi On Nut 46, On Nut Road, On Nut Subdistrict, Suan Luang District, Bangkok 10250, Thailand
Tel: 02-3220777
Fax: 02-3221891
Email: legal@alla.co.th
ALLA Public Company Limited
General Terms & Conditions of Sales and Service Level Agreement (SLA)
These General Terms & Conditions apply to all quotations, contracts, sales, installations, commissioning, and services provided by ALLA Public Company Limited
for Crane & Hoist Systems, Loading Bay Equipment, and Solar PV Systems. Unless otherwise agreed in writing, these terms strictly govern all commercial engagements with ALLA.
PART A: GENERAL TERMS & CONDITIONS (Commercial & Legal Framework)
- Scope of Application & Supply
All projects shall be executed strictly in accordance with:
- The approved quotation.
- The mutually agreed scope of supply.
- Approved technical documentation and drawings (where applicable).
Only items expressly stated in the approved quotation are included in the scope of work. Any item, service, or feature not clearly specified shall be deemed excluded and shall not give rise to any obligation or liability on the part of Alla.
- Quotation & Contract Formation
A contract becomes legally binding upon:
- A mutually signed written agreement or Letter of Award (LOA).
- Receipt of the agreed deposit amount as specified in the quotation.
- Product Standard Policy
3.1. Standard Configuration: All equipment is supplied in the manufacturer’s standard industrial
configuration unless otherwise agreed in writing. This includes standard materials, design, components, finishing, and operational characteristics appropriate for industrial use. Requests for customization, alternative brands, special finishing, or upgraded features must be confirmed in writing and may result in adjustments to the price and delivery schedule.
3.2. Functional Acceptance: Project acceptance shall be based exclusively on compliance with agreed technical specifications, successful installation and commissioning, and proper operational performance. Acceptance shall not be based on subjective expectations, personal preferences, aesthetic comparisons, or assumptions not documented in the contract.
3.3. Industrial Characteristics: The Customer acknowledges that industrial equipment exhibits normal operational characteristics. Minor cosmetic imperfections, surface/coating variations typical of fabricated steel, operational mechanical sound, vibration within acceptable limits, and structural movement within design tolerances do not affect functionality and shall not be considered defects.
- Variations & Changes
Any change to the scope, specifications, configuration, or project schedule must be officially confirmed in writing. Approved variations may result in adjustments to the contract price, delivery timeline, and technical parameters. Verbal instructions or requests shall not be considered binding unless formally documented and signed by both parties.
All related works, site conditions, utilities, and supporting infrastructure required for installation shall comply with the Company’s standard requirements. If any such conditions do not meet the Company’s standards, the Customer shall be responsible for carrying out the necessary modifications or corrective works to ensure compliance prior to installation. Any such non-compliance shall not shorten or affect the Company’s scheduled installation time. ??
- Pricing & Payment Terms
- Prices are exclusive of Value Added Tax (VAT) unless stated otherwise.
- Payment terms are strictly as specified in the quotation. Progressive billing and itemized milestone payments are permitted as agreed.
- Alla reserves the right to suspend work, delivery, or services in the event of delayed payment.
- Late payments may incur statutory interest charges.
- Project Delivery & Installation Standards
Project completion and handover shall be determined upon successful installation, completion of functional testing, and commissioning confirmation. Acceptance is based strictly on operational functionality and documented scope compliance.
- Delays & Additional Costs
If a project delay occurs due to customer-related issues, site unreadiness, approval delays, regulatory requirements, force majeure, or circumstances beyond Alla’s control, Alla shall be entitled to extend the project timeline, and the project schedule shall be adjusted accordingly. The Customer shall be liable for resulting additional costs, which may include:
- Bank Guarantee (BG) or bond extension fees.
- Insurance extension premiums.
- Standby manpower and mobilization costs.
- Equipment storage fees.
- Price escalation and related financial charges.
- Risk & Limitation of Liability
The risk of loss transfers to the Customer upon delivery to the site or completion of installation. Alla’s liability is strictly limited to the repair or replacement of defective components. Alla shall not be liable for indirect or consequential damages, including loss of production, loss of profit, business interruption, or third-party claims. Total aggregate liability shall not exceed the contract value.
- Ownership, Title, and Offsetting Debts
- Retention of Title: Ownership and title of goods remain entirely with ALLA Public Company Limited until full and final payment is received.
- No Offsetting: The Customer is strictly prohibited from arbitrarily withholding payments, deducting costs, or offsetting debts due to alleged damages without prior written mutual agreement.
- Force Majeure
Alla shall not be responsible for delays or failures due to circumstances beyond reasonable control (e.g., natural disasters, labor disruptions, government actions, supply chain interruptions, material shortages, war, or communicable diseases).
- Governing Law
All agreements and disputes shall be governed by and interpreted in accordance with the laws of the Kingdom of Thailand.
PART B: SERVICE LEVEL AGREEMENT (SLA) (Operational & Performance Commitment)
- SLA Effective Date
This SLA becomes legally effective from the date of contract activation or completion of the sale, whichever occurs first.
- Standard Business Hours
- Hours: 08:00 – 17:00, Monday to Saturday (excluding public holidays).
- Out-of-Hours: Emergency service outside standard hours may be provided subject to a separate project agreement.
- Service Definitions
- Response Time: The time between Customer notification of an issue and Alla’s first official acknowledgment.
- Resolution Time: The time required to restore system functionality.
- Emergency: A complete system shutdown or a safety-related failure that prevents operation.
- Service Response Commitment
Service Category | Response Time | Target Resolution Time |
Emergency | Within 2 hours | 4–24 hours |
Major Issue | Within 8 working hours | 1–2 working days |
Minor Issue | Within 24 hours | Scheduled visit |
Note: Resolution times may vary depending on site access, geographical location, and spare
part availability.
- Product-Specific Service Standards
- Crane & Hoist Systems: “Emergency” classification includes a complete system shutdown or failure of critical safety devices.
- Loading Bay Equipment: “Emergency” classification includes conditions where the dock leveler or door is completely inoperable, blocking facility operations.
- Solar PV Systems: “Emergency” classification includes inverter failure or a total system power outage. Note: Performance variations or output drops due to weather conditions or utility grid fluctuations are not considered system defects.
- Preventive Maintenance (If Contracted)
To ensure optimal reliability, Alla offers structured maintenance programs. Services include mechanical/electrical inspections, safety verification, operational testing, system adjustment, and service reporting. (Equipment downtime of approximately 3 hours per unit is required during inspections).
- Warranty Conditions
The warranty covers manufacturing defects under normal industrial use within the specified period. The warranty strictly excludes:
- Consumable and wear parts.
- Improper operation, operator error, or overloading beyond rated capacity.
- Unauthorized modifications or repairs by third parties.
- Insufficient or bypassed preventive maintenance.
- External electrical fluctuations or environmental damage beyond design conditions.
- Customer Responsibilities
To ensure safe and efficient system performance, the Customer must:
- Provide safe, continuous access to the site and equipment.
- Operate equipment strictly within its rated capacity and follow operational safety guidelines.
- Ensure operation by trained and authorized personnel only.
- Notify Alla promptly of any service issues.
- Sign the formal handover certificate immediately upon work completion or within 7 days of notification, after which the project is legally deemed accepted.
- Service Suspension & Termination
- Suspension: Alla reserves the right to immediately suspend maintenance or repair services in cases of non-payment or if unsafe working conditions are present at the site. Financial implications of suspension are governed by the General Terms & Conditions.
- Termination: This SLA forms an integral part of the main contract and shall remain in effect for as long as the main contract is in force.