Dear Member,
Please respond by checking the (I give my consent ). This is a requirement in order to comply with the Thailand Personal Data Protection Act (PDPA) B.E. 2562 (2019) in regards to the transfer of your personal data out of Thailand. Below is the explicit consent form.
Data Transfer Consent Form: The American Legion
1. Identity of the Data Controller and Contact Information
The primary Data Controller is The American Legion National Headquarters, located in Indianapolis, Indiana, USA, with processing operations occurring in the Department of France and the USA.
Transferring Post Contact: Michael J Chitwood/Adjutant/Post TH-02
2. Specific Purposes of Data Processing and Transfer
Your personal data is collected and processed for the following explicit purposes, relevant to your membership:
Membership Management: To process your membership application, record-keeping, and facilitate post transfers.
Service Delivery: To provide member benefits and customer service.
Communication: To inform you about American Legion events, opportunities, and updates via relevant communication methods.
Verification: To verify service eligibility and maintain an accurate, continuous membership record at the national level and within the Department of France.
3. Data to be Transferred
The personal data being transferred may include:
Full Name, Date of Birth, Gender. Contact details (address, phone number(s), email address). Membership ID and continuous years of service. Military service information (branch, war era, discharge status). Family member information (if applicable for dependent benefits).
4. Recipients and Destination Country
I explicitly consent to the transfer of my personal data from the Transferring Post in Thailand to the following recipients and country: The American Legion Department of France and The American Legion National Headquarters, USA (as the ultimate data controller/repository).
5. Data Protection Standards Acknowledgment
I understand that the data protection laws in the Department of France align with the European Union's GDPR, which provides comprehensive data protection rights. While a formal adequacy decision from the Thai Personal Data Protection Committee is pending, the legal framework in the Department of France is robust and is widely expected to be deemed "adequate".
The American Legion entities commit to implementing appropriate administrative, technical, and physical safeguards to protect my personal information in line with organizational privacy policies.
6. Voluntary Consent and Data Subject Rights
Voluntary Provision: I understand that providing this consent and information is voluntary, but necessary for the American Legion to perform its contractual obligations to me as a member and facilitate a smooth post transfer.
Right to Withdraw Consent: I have the right to withdraw this consent at any time by providing written notice to the Transferring Post Adjutant. I understand that withdrawal may prevent the American Legion from providing specific member services or maintaining an accurate national record.
Rights of Access/Correction: I can exercise my rights under the PDPA and GDPR to access, correct, or amend my personal data by contacting the relevant American Legion Post.
7. Acknowledgment and Signature
I hereby provide my explicit, informed consent and authorize the American Legion Post in Thailand to collect, maintain, store, and transfer my Personally Identifiable Information (PII) to the American Legion entities in the Department of France (and subsequently the USA HQ) for the purposes described above.
