Objective and scope of the Policy
The Company attaches great importance to the personal data of its customers, partners, employees of the Company; including those who contact, whether direct or indirect, with the Company. Therefore, the Company has provided a Personal Data Protection Policy in order to indicate how the data subject's personal data is treated in accordance with the Personal Data Protection Act BE.2562. The Company would like to announce the Personal Data Protection Policy as follows.
Personal Data means any information relating to a person, which enables the identification of such person, whether direct or indirect, which the Company collects as follows.
“Sensitive Data” means information that is specifically defined by law under the Personal Data Protection Act, such as health information, criminal information, etc.
The Personal Data and Sensitive Data hereinafter referred as “Personal Data”
The Company may disclose the Personal Data of the data subject to any other person, including its partners, subcontractors. auditor bank Legal authority, any person who has a legal relationship or has a contract with the Company or government agencies as necessary under this Privacy Policy and/or as required by law.
The Company may have a need to transfer the Personal Data of the data subject to foreign affiliates provided that such entity has adequate personal data protection standards.
5.1 Retention and retention period of Personal Data.
The data subject has the right to request The Company takes any action in accordance with this Personal Data Protection Policy and as required by law as follows:
6.1 Right to access and request a copy of data
The data subject has the right to access and obtain a copy of his/her Personal Data for which the Company is responsible for the duration of Personal Data is with the Company, as well as request the Company to reveal the obtainment of the Personal Data that the data subject do not give consent to the Company.
6.2 Right to withdraw the consent
If the data subject has given consent to the collection, use, and disclosure of personal information to the Company, the data subject has the right to withdraw such consent at any time during the period the Personal Data is with the Company. Unless otherwise such withdraw right is restricted by law.
6.3 Right to object from collecting, using, processing or disclosing Personal Data
The data subject has the right to object to the Company from collecting, using, processing or disclosing Personal Data. Unless it is an operation where the Company is required to comply with the law and is in the case of collecting or using that Personal Data to keep as evidence for potential litigation between the Company and the data subject within the legal statute of limitations.
6.4 Right to request the Company to delete or destroy Personal Data
The data subject has the right to request the Company to delete or destroy the Personal Data. or make Personal Data non-identifiable. In case of Personal Data is no longer necessary for its retention in accordance with the relevant purposes in this Personal Data Protection Policy or when the data subject has exercised the right to revoke the consent or exercise the right to object or when that Personal Data is unlawful collected, used or disclosed.
6.5 Right to restriction of processing
The data subject has the right to request the Company to suspend the use of the Personal Data if the Company is in the process of reviewing the request that the data subject has exercised the right to request correction of Personal Data or Personal Data is unlawful collected, used or disclosed or when it is under the process of legal proof.
6.6 Right to request amendment of Personal Data
Data subjects have the right to request the Company to rectify the data to be current data and complete data.
6.7 Right to complain
If the data subject believes that the processing of the Personal Data which the Company has performed is unlawful or non-comply with the Personal Data Protection Law, the data subject has the right to file a complaint to the office of the Personal Data Protection Commission (PDPC).
The Company has appointed a Data Protection Officer (DPO) to conduct audits and controls. Any action of the Company relating to the collection, use and disclosure of Personal Data to comply with the Personal Data Protection Act B.E. 2562(2019); includes other applicable laws.