Policies and Terms

Definition

Personal data means information about an individual that makes it possible to identify that individual, directly or indirectly. This excludes information about deceased persons.

Respecting the Right to Privacy

1. The company respects and values ​​the right to personal data and the protection of personal data, and recognizes that data subjects wish to have security in providing information to the company.

2. Personal data received by the company that can identify the individual data subject and is complete, accurate, up-to-date, and of high quality will only be used for the company’s operational purposes. The company will implement strict measures to maintain security and prevent the unauthorized use of personal data.

Collection of personal data

1. In collecting and storing personal data, the Company will use lawful methods and will collect and store personal data only as necessary for the purposes stated in this policy.

2. Personal data collected includes: title, first name, last name, gender, date of birth, religion, nationality, marital status, criminal record, start date of employment, address, contact number, email address, national identification number, bank account number, financial information, education and training information, work experience and performance evaluation information, employee ID, health information, social security number, driver’s license number, tax identification number, photographs, videos, emergency contact information, fingerprints, facial recognition, website access data (log files), and cookie ID.

3. The Company will obtain consent from the data subject before or during data collection, except in the following cases where consent is not required:

To comply with laws, regulations, rules, contractual obligations, and necessary conditions for providing the Company’s services.

For the benefit of the data subject’s life, health, or safety.

For the Company’s legitimate interests.

4. The Company will not collect your personal data relating to health history, religion, fingerprints and facial recognition, criminal history, or information that may result in discrimination or reputational damage to the data subject. Personal information will not be used for disseminating information, promotional activities, or analyzing sales data to develop products and services, unless written consent is obtained from the data subject.

5. The company will collect personal information directly from the data subject and may collect personal information from other sources only in the following cases:

The data subject has been notified of the collection of personal information from other sources, and
Consent has been obtained from the data subject, or in cases where the collection of personal information is exempt from the requirement to obtain consent under clause 3, or the information is public.

6. The company collects personal information in paper format and in computer systems, including the Cloud, with restricted access to such information.

7. The company has a maximum retention period of 10 years for personal information from the date of termination of employment or the date of termination of duties according to law or regulations from regulatory agencies, except for commercial information which will be retained indefinitely for the duration of the company’s operations.

8. After the retention period has expired, the company will destroy the personal information by destroying copies of documents or deleting electronic data.

Purposes of Collecting Personal Information

1. The company collects personal information for the following purposes:

To comply with laws, regulations, requirements, contracts, and necessary conditions for the operation and management of the company.

For the benefit of the life, health, or safety of the data subject. 1. The company will collect data for the following legitimate purposes:

For the company’s marketing activities.

For the purpose of improving the quality of the company’s services.

For investor relations activities.

For the assessment of employee and job applicant capabilities.

For the management of employee compensation or other benefits.

2. The company will not perform any actions different from those stated in the purposes of data collection, unless the new purpose has been notified to the data subject and their consent has been obtained (as applicable).

3. If there is a subsequent change to the purposes of collecting personal data, the company will notify you and request your consent (as applicable).

Processing of Personal Data

1. The Company may use or disclose personal data only with your consent and only for the purposes outlined in this policy, except:

To comply with laws, regulations, rules, contractual obligations, and the Company’s terms of service.

For the benefit of the life, health, or safety of the data subject.

For the legitimate interests of the Company.

When necessary to comply with laws, to assess the work performance of employees, labor protection, and social security.

2. The Company may need to disclose personal data to affiliated companies or government agencies as required by law, such as the Revenue Department, the Department of Labor Protection and Welfare, the Social Security Office, banks, etc.

3. In cases where the Company hires other companies or agencies to process personal data, such as statistical data analysis, database system updates and maintenance, etc., the Company has stipulated that such hired companies or agencies maintain the confidentiality and security of personal data. Before disclosing personal data to those companies, the Company will enter into an agreement prohibiting the use of such personal data outside of the Company’s activities.

Security Measures

The company recognizes the importance of protecting personal data and has therefore established appropriate security measures in accordance with data confidentiality principles to prevent the loss, unauthorized access, destruction, use, alteration, modification, or disclosure of personal data. These measures are in compliance with the company’s Information Technology Security Policy and Guidelines.

Rights of data subjects

1. Right to Withdraw Consent:
The data subject has the right to withdraw their consent to the processing of their personal data, including the portion they have consented to, at any time while the personal data is held by the company.

2. Right to Be Informed:
The data subject has the right to be informed about their personal information, the purpose of data processing, their rights, or any actions taken regarding their personal data.

3. Right to Access Personal Data:
The data subject has the right to access their own personal data and request the company to provide them with a copy of such data. They may also request the company to disclose the source of personal data that they did not consent to.

4. Right to Correct Personal Data:
The data subject has the right to request the company to correct inaccurate data or to supplement incomplete data.

5. Right to Delete Personal Data:
The data subject has the right to request the company to delete their data for certain reasons.

6. Right to Prohibit the Processing of Personal Data:
The data subject has the right to suspend the use of their personal data for certain reasons.

7. Right to Transfer Personal Data:
The data subject has the right to transfer the personal data they have provided to the company to another data controller or to themselves for certain reasons.

8. Right to Object to the Processing of Personal Data
Data subjects have the right to object to the processing of their personal data for certain reasons.

9. Right to File a Complaint if they believe their rights have been violated by the company, its officers, or its agents.

Data subjects have the right to file a complaint with the committee appointed under Section 5 of the Personal Data Protection Act B.E. 2563 (2020).

Data subjects can inform company officers of their above-mentioned intentions.

However, if the exercise of these rights by the data subject affects the company’s necessary activities and/or the data subject is unable to provide a suitable reason, the company has the right to refuse the request to exercise such rights.

Furthermore, the company may charge a fee for such actions from the person notifying the intention.

Changes to the Privacy Policy

The company may revise this privacy policy from time to time to reflect changes in its services, company operations, and feedback from data subjects. The company will clearly announce any changes before implementing them or may send a notification directly to the data subject.

Contact Information

For further inquiries or to express your intention to exercise your data subject rights, please contact the company at:

Onvalla Company Limited
Secretary of the Personal Data Protection Working Group
933, 935, 937, 939 Soi On Nut 46, On Nut Road, On Nut Subdistrict, Suan Luang District, Bangkok 10250, Thailand
Tel: 02-3220777
Fax: 02-3221891
Email: legal@alla.co.th

Cookie Policy

This website is provided by Alla Public Company Limited and Onvalla Company Limited. This website uses cookies and other tools to help distinguish your website usage patterns from other users, which will help provide you with a better website experience and help improve the quality of the website. By continuing to use this website, you agree to the installation of cookies on your computer.

What are cookies?

Cookies are small pieces of text containing downloaded data that may be stored in your web browser or other internet-connected device (such as your computer, smartphone, or tablet), which the server can retrieve later, similar to the memory of a web page.

How cookies work: They help automatically collect and store the following information about your website visits:

Internet domain and IP address from where you accessed the website.

Type of browser software, as well as the structure and operating system used to access the website.

Date and time you accessed the website.
The web pages you visited and where you left the website, including the content on the web pages you visited and the duration of your visit.

(Cookie information stored within the Web browser…) The server will be logged for 90 days (in accordance with the Cybersecurity Act).

Cookie Usage

Types of cookies used and their use include, but are not limited to, the following:

Strictly Necessary Cookies: These cookies are essential for the website’s operation, including those that allow you to access information and use the website securely.
Analytical/Performance Cookies: These cookies help remember and count the number of website visitors and understand their browsing behavior to improve the website’s quality and suitability. They also collect statistical data on how users access and browse the website, which helps improve the website’s functionality by making it easier for users to find what they need, understanding user interests, and measuring the effectiveness of advertising.
Functionality Cookies: These cookies are used to remember you when you return to the website, allowing us to personalize content for you, tailor the website to your needs, and remember your settings such as language, region, or font size.
Targeting Cookies: These cookies record your website visits, the web pages you visit, and the links you access. This information is used to personalize the website and any content appearing on the web pages to better match your interests. This information may also be shared with third parties for this purpose.
Advertising Cookies: These cookies remember your settings when accessing the website and use this information to personalize the website and present advertisements that are most relevant to you. For example, displaying advertisements for products you are interested in, preventing or limiting the number of times you see the same advertisement repeatedly, and helping to measure the effectiveness of advertising.

Please note that some types of cookies on this website are managed by third parties, such as advertising networks, features like videos, maps, and social media, and other external website providers such as website analytics services. These cookies are often analytical/performance measurement cookies or targeting cookies. You should review the cookie policy and privacy policy on the third-party website to understand how they may use your information.

Cookie Settings

You can block cookies by adjusting your browser settings. You may refuse to install all or some types of cookies. However, please be aware that if you set your browser to block all cookies (including those necessary for functionality), you may not be able to access all or some websites.

Whenever you wish to revoke your consent to cookie usage, you will need to configure your browser to delete cookies for each browser you use.

For more information on how to do this, please select the “Help” section in your internet browser.

Privacy Notice

Recognizing the importance of your personal data entrusted to us by Alla Public Company Limited and its subsidiary Onvala Company Limited, and needing to comply with the Personal Data Protection Act B.E. 2562 (2019) to ensure the protection of your rights regarding the collection, use, disclosure (“processing”) of your personal data, this document aims to inform you of the methods we collect, use, and disclose your personal data. We kindly request that you read this document to understand the purposes for which we collect, use, and disclose your personal data.

1. Purposes and Basis for Data Processing
The company collects your personal data for the following activities:

To comply with laws, regulations, requirements, contracts, and necessary conditions for the operation and management of the company.

  • For the benefit of the life, health, or safety of the data subject.
  • For the legitimate interests of the company.
  • For the company’s marketing activities.
  • To improve the quality of the company’s services.
  • To conduct investor relations activities.
  • To assess the capabilities of employees and job applicants.
  • To manage employee compensation or other benefits. 

2. Basis for Data Processing
The company processes your personal data on the following basis:

– Contract basis: Because you are required to provide personal data to the company for the purpose of entering into a contract and performing contractual obligations, your non-provision of personal data will result in the company being unable to communicate with you, unable to achieve the objectives of the contract, unable to verify the work mandated by the contract, unable to verify your ability to perform the contract, and unable to verify your identity, as per Section 24 (3) of the Personal Data Protection Act B.E. 2562 (2019).

– Consent basis: The company may collect your health data, fingerprints, and facial recognition data (biological data) for processing to determine your qualifications for employment with the company, record work hours, and perform contractual obligations with clients, as well as collect general data for marketing activities, improving product and service quality, and for investor relations activities. If you wish to withdraw your consent, you can contact the company and state your intention as per Clause 4. However, because this data is crucial for employee selection, timekeeping, and performing contractual obligations with clients, if you withdraw your consent, the company has the right to refuse to hire you. or refuse to calculate your working hours.

– Legitimate Interest: The company may use your personal data for processing for communication and business operations, fulfilling obligations between employer and employee, ensuring safety of life and property, and acting in the interest of shareholders, which is a case of necessity for legitimate interests under Section 24 (5) of the Personal Data Protection Act B.E. 2562 (2019).

– Legal Obligation: The company may use your personal data for processing to comply with applicable laws, such as the Securities and Exchange Act B.E. 2535 (1992), the Anti-Money Laundering Act B.E. 2542 (1999), labor protection laws, and other laws under the regulations governing the submission of personal data, such as the Civil Procedure Code, which empowers the court to order parties to submit documents or information in court proceedings, etc., which is a case of compliance with the law under Section 24 (6) of the Personal Data Protection Act B.E. 2562 (2019).

3. Personal data to be processed and the period of data retention.
List of personal data processed by the company: Title, First Name, Last Name, Gender, Date of Birth, Religion, Nationality, Marital Status, Criminal Record, Start Date, Address, Contact Number, Email, National ID Number, Bank Account Number, Financial Information, Educational and Training Information, Work Experience and Performance Evaluation Information, Employee ID, Health Information, Social Security Number, Driver’s License, Taxpayer Identification Number, Photographs, Videos, Emergency Contact Information, Fingerprints, Facial Recognition, Website Access Data (Log Files), and Cookie ID. This data will be retained for a maximum of 10 years from the date of termination of employment or the termination of duties as required by law or regulatory authorities, except for commercial data, which will be retained indefinitely for the company’s operations.

After the aforementioned period, the company will delete or anonymize the personal data.

Note: Sensitive data on identification documents, such as religion, race, and blood type, can be concealed. If you submit documents without concealing the above information, the company will conceal it itself, and it will not be considered that the company has received sensitive data from the data subject.

4. Types of individuals or entities that may receive personal data:
The company may disclose personal data to third parties only as necessary to fulfill its primary objectives or objectives related to personal data processing. The company may share your information with affiliated companies or groups of companies, client companies or business partners, regulatory agencies, government agencies, or agencies with supervisory duties, such as the Securities and Exchange Commission.

General Terms & Conditions of Sales and Service Level Agreement (SLA)

These General Terms & Conditions apply to all quotations, contracts, sales, installations, commissioning, and services provided by Onvalla Co., Ltd. for Crane & Hoist Systems, Loading Bay Equipment, and Solar PV Systems. Unless otherwise agreed in writing, these terms strictly govern all commercial engagements with Onvalla.

PART A: GENERAL TERMS & CONDITIONS (Commercial & Legal Framework)

  1. Scope of Application & Supply

All projects shall be executed strictly in accordance with:

  • The approved quotation.
  • The mutually agreed scope of supply.
  • Approved technical documentation and drawings (where applicable).

Only items expressly stated in the approved quotation are included in the scope of work. Any item, service, or feature not clearly specified shall be deemed excluded and shall not give rise to any obligation or liability on the part of Onvalla.

  1. Quotation & Contract Formation

A contract becomes legally binding upon:

  • A mutually signed written agreement or Letter of Award (LOA).
  • Receipt of the agreed deposit amount as specified in the quotation.
  1. Product Standard Policy

    3.1. Standard Configuration: All equipment is supplied in the manufacturer’s standard industrial

configuration unless otherwise agreed in writing. This includes standard materials, design, components,

finishing, and operational characteristics appropriate for industrial use. Requests for customization,

alternative brands, special finishing, or upgraded features must be confirmed in writing and may result in adjustments to the price and delivery schedule.

    3.2. Functional Acceptance: Project acceptance shall be based exclusively on compliance

with agreed technical specifications, successful installation and commissioning, and proper

operational performance. Acceptance shall not be based on subjective expectations, personal

preferences, aesthetic comparisons, or assumptions not documented in the contract.

    3.3. Industrial Characteristics: The Customer acknowledges that industrial equipment exhibits

normal operational characteristics. Minor cosmetic imperfections, surface/coating variations

typical of fabricated steel, operational mechanical sound, vibration within acceptable limits, and

structural movement within design tolerances do not affect functionality and shall not be considered

defects.

  1. Variations & Changes

Any change to the scope, specifications, configuration, or project schedule must be officially confirmed in writing. Approved variations may result in adjustments to the contract price, delivery timeline, and technical parameters. Verbal instructions or requests shall not be considered binding unless formally documented and signed by both parties.

All related works, site conditions, utilities, and supporting infrastructure required for installation shall comply with the Company’s standard requirements. If any such conditions do not meet the Company’s standards, the Customer shall be responsible for carrying out the necessary modifications or corrective works to ensure compliance prior to installation. Any such non-compliance shall not shorten or affect the Company’s scheduled installation time. ??

  1. Pricing & Payment Terms
  • Prices are exclusive of Value Added Tax (VAT) unless stated otherwise.
  • Payment terms are strictly as specified in the quotation. Progressive billing and itemized milestone payments are permitted as agreed.
  • Onvalla reserves the right to suspend work, delivery, or services in the event of delayed payment.
  • Late payments may incur statutory interest charges.
  1. Project Delivery & Installation Standards

Project completion and handover shall be determined upon successful installation, completion

of functional testing, and commissioning confirmation. Acceptance is based strictly on operational

functionality and documented scope compliance.

  1. Delays & Additional Costs

If a project delay occurs due to customer-related issues, site unreadiness, approval delays, regulatory requirements, force majeure, or circumstances beyond Onvalla’s control, Onvalla

shall be entitled to extend the project timeline, and the project schedule shall be adjusted accordingly. The Customer shall be liable for resulting additional costs, which may include:

  • Bank Guarantee (BG) or bond extension fees.
  • Insurance extension premiums.
  • Standby manpower and mobilization costs.
  • Equipment storage fees.
  • Price escalation and related financial charges.
  1. Risk & Limitation of Liability

The risk of loss transfers to the Customer upon delivery to the site or completion of installation.

Onvalla’s liability is strictly limited to the repair or replacement of defective components. Onvalla shall not be liable for indirect or consequential damages, including loss of production, loss of profit, business interruption, or third-party claims. Total aggregate liability shall not exceed the contract value.

  1. Ownership, Title, and Offsetting Debts
  • Retention of Title: Ownership and title of goods remain entirely with Onvalla Co., Ltd. until full and final payment is received.
  • No Offsetting: The Customer is strictly prohibited from arbitrarily withholding payments, deducting costs, or offsetting debts due to alleged damages without prior written mutual agreement.
  1. Force Majeure

Onvalla shall not be responsible for delays or failures due to circumstances beyond reasonable

control (e.g., natural disasters, labor disruptions, government actions, supply chain interruptions,

material shortages, war, or communicable diseases).

  1. Governing Law

All agreements and disputes shall be governed by and interpreted in accordance with the laws of the Kingdom of Thailand.

PART B: SERVICE LEVEL AGREEMENT (SLA) (Operational & Performance Commitment)

  1. SLA Effective Date

This SLA becomes legally effective from the date of contract activation or completion of the sale, whichever occurs first.

  1. Standard Business Hours
  • Hours: 08:00 – 17:00, Monday to Saturday (excluding public holidays).
  • Out-of-Hours: Emergency service outside standard hours may be provided subject to a separate project agreement.
  1. Service Definitions
  • Response Time: The time between Customer notification of an issue and Onvalla’s first official acknowledgment.
  • Resolution Time: The time required to restore system functionality.
  • Emergency: A complete system shutdown or a safety-related failure that prevents operation.
  1. Service Response Commitment

Service Category

Response Time

Target Resolution Time

Emergency

Within 2 hours

4–24 hours

Major Issue

Within 8 working hours

1–2 working days

Minor Issue

Within 24 hours

Scheduled visit

Note: Resolution times may vary depending on site access, geographical location, and spare

part availability.

  1. Product-Specific Service Standards
  • Crane & Hoist Systems: “Emergency” classification includes a complete system shutdown

or failure of critical safety devices.

  • Loading Bay Equipment: “Emergency” classification includes conditions where the dock leveler or door is completely inoperable, blocking facility operations.
  • Solar PV Systems: “Emergency” classification includes inverter failure or a total system power outage. Note: Performance variations or output drops due to weather conditions or utility

grid fluctuations are not considered system defects.

  1. Preventive Maintenance (If Contracted)

To ensure optimal reliability, Onvalla offers structured maintenance programs. Services include

mechanical/electrical inspections, safety verification, operational testing, system adjustment,

and service reporting. (Equipment downtime of approximately 3 hours per unit is required during inspections).

  1. Warranty Conditions

The warranty covers manufacturing defects under normal industrial use within the specified period. The warranty strictly excludes:

  • Consumable and wear parts.
  • Improper operation, operator error, or overloading beyond rated capacity.
  • Unauthorized modifications or repairs by third parties.
  • Insufficient or bypassed preventive maintenance.
  • External electrical fluctuations or environmental damage beyond design conditions.
  1. Customer Responsibilities

To ensure safe and efficient system performance, the Customer must:

  • Provide safe, continuous access to the site and equipment.
  • Operate equipment strictly within its rated capacity and follow operational safety guidelines.
  • Ensure operation by trained and authorized personnel only.
  • Notify Onvalla promptly of any service issues.
  • Sign the formal handover certificate immediately upon work completion or within 7 days of notification, after which the project is legally deemed accepted.
  1. Service Suspension & Termination
  • Suspension: Onvalla reserves the right to immediately suspend maintenance or repair services in cases of non-payment or if unsafe working conditions are present at the site. Financial implications of suspension are governed by the General Terms & Conditions.
  • Termination: This SLA forms an integral part of the main contract and shall remain in effect for as long as the main contract is in force.