Last updated: 7 October 2026
1. Introduction
The Faculty of Humanities and Social Sciences, Surindra Rajabhat University ("the Faculty") respects the privacy of visitors to huso.srru.ac.th ("the website"). This policy explains how we collect, use and disclose personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).
Surindra Rajabhat University is the data controller; the Faculty operates this website. This policy applies together with the University's personal data protection policy.
2. Personal data we collect
2.1 Data you give us
- Contact form: name, email address, phone number, subject and message
- Complaints: category, subject, details, and your name, email and phone number (unless you submit anonymously, in which case no contact details are stored)
- User accounts: name, email address and password (stored as a one-way hash that nobody can read)
- Comments, ratings and survey responses you submit on the website
- Other forms, such as alumni or research forms, as described on each form
2.2 Data collected automatically
- Computer traffic data (logs): IP address, date and time, requested page and browser type, recorded by the server for security and as required by law
- Visit statistics (only with your consent): pages viewed, browser type and a random session ID. The statistics system does not record IP addresses.
- Cookies, as described in our Cookie Policy
3. Purposes and legal bases
| Purpose | Legal basis (PDPA) |
|---|---|
| Answering your enquiries and acting on your requests | Public task of the University (s. 24(4)) / steps taken at your request (s. 24(3)) |
| Handling complaints and informing complainants of the outcome | Public task of the University (s. 24(4)) |
| Providing user accounts, comments and other online services | Steps taken at your request (s. 24(3)) |
| Keeping the website secure and preventing misuse | Legitimate interests (s. 24(5)) |
| Retaining computer traffic data | Legal obligation (s. 24(6)) under the Computer-Related Crime Act B.E. 2550 (2007) |
| Analysing visit statistics to improve the website | Consent (s. 19), which you may withdraw at any time |
We do not use your data for advertising and we never sell personal data.
4. Disclosure of personal data
We may disclose your data, only as far as necessary, to:
- units of Surindra Rajabhat University involved in your enquiry
- service providers acting on the University's behalf, such as server and storage providers, under confidentiality obligations
- government agencies or authorities when required by law or court order
Some pages embed content from third parties such as Google Maps and YouTube, which may collect data under their own policies.
5. Retention
- Contact form messages: up to 5 years from the date of contact
- Complaints: up to 5 years after the complaint is closed
- User accounts: for as long as you use the account, and deleted on request
- Computer traffic data: at least 90 days, as required by law
- Visit statistics: kept in a form that does not identify individuals
After these periods we delete or anonymise the data unless the law requires a longer retention period.
6. Security
We apply appropriate technical and organisational measures, such as HTTPS encryption, access limited to authorised staff and logging of administrator activity. See our Website Security Policy.
7. Your rights
Under the PDPA you have the right to:
- withdraw your consent
- access and obtain a copy of your data
- data portability
- object to the collection, use or disclosure of your data
- request erasure or destruction of your data
- request restriction of use
- request correction of your data
- lodge a complaint with the Personal Data Protection Committee (PDPC) if you believe the law has been breached
To exercise these rights, contact us using the details in section 10. We will respond within 30 days of receiving your request.
8. Cookies
The website uses cookies that are necessary for it to work, and analytics cookies only with your consent. You can change your choice at any time with the "Cookie settings" link at the bottom of the site. See our Cookie Policy.
9. Changes to this policy
We may update this policy from time to time. The date of the latest update is shown at the top of this page.
10. Contact
Faculty of Humanities and Social Sciences, Surindra Rajabhat University
Building 38, 186 Moo 1, Surin-Prasat Road, Nok Mueang, Mueang, Surin 32000, Thailand
Tel./Fax +66 44 513 369
Email human@srru.ac.th
Data Protection Officer (DPO), Surindra Rajabhat University: dpo@srru.ac.th