Principles and reasons
The company recognizes the importance of protecting personal information. This is an important basic right to privacy that must be protected by law. The Company has prepared this privacy notice. This is a principle for protecting the personal information of the owners of personal information that has been disclosed to the company.
The Company recommends that owners of personal data understand this announcement. It explains how the company treats the personal data of the data subject. Including various rights of the owner of personal data The important contents are as follows:
1. Definition
| "announce" | mean | This privacy notice Including those that have been amended and announced later. |
| "company" | mean | Infraset Public Company Limited |
| “Personal information” | mean | Information about an individual which enables that individual to be identified. Whether directly or indirectly, such as first name, last name, email, address, telephone number, picture, cookie usage information, etc. |
| “Personal data owner” | mean | The person to whom the personal data identifies |
| “Personal Data Controller” | mean | Individuals or juristic persons who have authority to make decisions regarding the collection, use, or disclosure of personal information. |
| “Personal Data Processor” | mean | Persons assigned by the company to carry out the collection, use, or disclosure of personal information as requested. or on behalf of the Personal Data Controller, provided that the person performing such operations must not be the Personal Data Controller. |
| “Act” | mean | Personal Data Protection Act 2019 |
2. Scope of announcement
This notice applies to the person whose personal data it identifies and/or to any person who has disclosed personal data to the Company. This includes the Board of Directors. Company executive Employees at all levels of the company and the company's trading partners It also applies to individuals who have activities related to personal information with the company.
3. Principles and types of personal information that the company collects, uses, and discloses.
The Company will collect, use or disclose personal information in a limited way. according to lawful purposes and scope As necessary and fair The protection of these personal data includes but is not limited to the following information:
3.1 First and last name
3.2 Email
3.3 address
3.4 Telephone number
3.5 ID card number
3.6 pictures photos
3.7 Cookie usage information
The collection, use, or disclosure of personal information will not be organized. If there is no consent from the owner of personal data before or at that time. Unless there is a provision of law that allows this to be done.
Requesting consent ( 1) will be made expressly in writing or through an electronic system. unless consent cannot be obtained by such means; ( 2) the purpose of collecting, using, or disclosing personal information will be informed; and (3) the consent will be separated from other messages for clarity and ease of understanding.
The owner of personal data maintains the right to give consent or not to give consent or to withdraw consent. Right to request access to personal information Right to request transfer of personal information The right to object to the collection, use, or disclosure of personal information. The right to request erasure or destruction or make personal data non-personally identifiable. The details are as per item 7.
4. Purposes for collecting, using, processing and disclosing personal information
The Company will collect, use, process, or disclose personal information limited as necessary for sustainable and fair business operations. Taking into account personal rights and freedom and safety in storing personal information appropriately and adequately, the Company will not collect, use, process or disclose personal information. unless such action is based on the following objectives:
4.1 To prevent or stop danger to a person's life, body, or health.
4.2 It is necessary for the performance of the contract.
4.2.1 Compliance with conditions, requirements, and exercise of rights under the contract
4.2.2 Compliance with announcements and work regulations, such as various policies of the company, work manuals Company regulations Work regulations and/or office entry and exit requirements or the office of the company, etc., in order to provide management in various areas of the company more efficiently and effectively
4.2.3 General administration Health, Safety and Environmental Administration Human resource management such as procurement Receiving delivery Recruitment, employment, health insurance Social Security Compensation Fund provident fund
4.3 to follow the rules Relevant laws such as compliance with rules, regulations, requirements or provisions of the law. including orders or guidelines Various requirements of the state, government, government agencies Various agencies that oversees the business in order to ensure that the company's operations are in accordance with the contract, the law and the principles of good corporate governance.
4.4 It is necessary for the legitimate interests of the company.
4.4.1 Carrying out operations or businesses such as production, trading, selling, exchanging, hiring work, hiring things, providing services, digging, transporting, giving or receiving advice, investing, borrowing, receiving or paying money. This is for the benefit of operating the company's business for sustainable growth.
4.4.2 Caring for danger prevention and maintaining safety Maintaining occupational health Maintaining quality and the environment and/or managing various risks Both in normal conditions and in times of crisis from accidents that have occurred or may occur, such as recording CCTV images. Identity verification measures Exchanging tickets to enter the building
4.4.3 Carrying out any other work, such as secretarial work Conference work Company director information work Shareholder or securities information Corporate governance work Activities that are beneficial to the public or the public, posting announcements or doing various activities Both inside and outside the organization, etc., in order to participate in security and sustainability.
4.5 In order to comply with the consent of the owner of personal data.
4.5.1 Sales or marketing operations, such as promoting marketing activities Promotion Monitoring, inspecting and evaluating results in order to provide services and/or relationship management with customers or service recipients to be more efficient and effective.
4.5.2 Advertisements and communications such as inquiries, notifications, inspections, opinion surveys Verification of information Notification of news or any other matter as necessary in order to gain a better understanding of the company's business and services.
4.5.3 History making, data storage Statistics and research such as tracking, inspecting, processing, and analyzing data in order to improve, correct, develop, and present new products and/or services to suit the needs of the market, investors, customers, business partners, and/or those who Get involved with the company
5. Disclosure of your personal information
5.1 Subsidiaries in the company's business group It may include directors, executives, employees, contractors of the said subsidiary.
5.2 government agency Agencies with regulatory duties according to law
5.3 Your attorney, representative or legal representative who has legal authority.
5.4 Service providers directly related to the purpose of collecting such information.
5.5 To comply with relevant laws
6. Security of personal information
Proper protection and security of personal data is a fundamental right and freedom. that the owner of personal data should receive The company therefore provides a policy to protect personal information. Practice manual and/or measures for maintaining appropriate personal information security. in order to have limited collection, use, and processing Including preventing access, deletion, destruction and maintaining the confidentiality of personal information in accordance with the requirements of the Company's information technology security policy. and the company will organize a review and development of the policy Practice manuals and/or such measures when necessary or when technology changes in order to be effective in maintaining appropriate security.
7. Rights of the owner of personal data
The company respects the rights of personal data owners who wish to exercise their rights as follows:
7.1 Right to withdraw consent ( Right to withdraw consent) The owner of personal data has the right to withdraw consent given to the Company. throughout the period that personal information remains with the Company
7.2 Right of access and request for a copy of personal data ( Right of access) The owner of personal data has the right to access his or her personal data and request the company to make a copy of such personal data for them. Including requesting the company to disclose the acquisition of personal data that the owner of personal data has not given consent to the company.
7.3 Right to request To send or transfer personal data ( Right to data portability) The owner of personal data has the right to request the sending or transfer of his or her personal data provided to the Company to another data controller. or to the owner of personal information himself
7.4 Right to object to the collection, use, or disclosure of personal data ( Right to object) The owner of personal data has the right to object to the collection, use, processing, or disclosure of personal data. If it is considered incorrect, appropriate, or fair
7.5 Right to rectification: The owner of personal data has the right to request the company to correct the information to make it current, accurate, or complete.
7.6 Right to erase personal data ( Right to erasure) The owner of personal data has the right to request that the company delete it. or destroy their personal information or make their personal information into information that cannot identify the person who owns the personal information. due to lack of authority to collect and collect or because there is no need
7.7 Right to restrict the use of personal data ( Right to restriction of processing) Owners of personal data have the right to suspend the use of their personal data because the data is being verified. or because it is no longer necessary
When the Act It is effective for the entire edition. from the expiration of the Royal Decree's entry into force Define the agencies and businesses that Personal data controllers are not subject to the Personal Data Protection Act B.E. 2019 ( No. 2) B.E. 2021. Personal data owners can contact to request to exercise their rights through the channels that the company has specified. hold
8. Period of storing personal information
The Company will collect personal information within the period necessary to carry out the purposes in accordance with Section 4 of this Privacy Notice. The company will consider only necessity and appropriateness, unless it is collected according to relevant laws only.
9. Announcement changes
The company may consider reviewing announcements to be consistent with the Act, ministerial regulations, announcements, guidelines, and other criteria. related However, if the company changes the announcement The Company will notify you by posting an announcement on the Company's website. If there is a conflict between the original announcement Please consider the new version as the main issue.
If this announcement does not cover what the ministerial regulations or announcements will be made later in accordance with the Act. Such ministerial regulations or announcements shall come into force as if they were part of this announcement.
10. Contact
The owner of personal information who has provided the information to the company You can contact the company. In order to submit a request to proceed according to rights number 7 above (contact details appear in the topic “Contact channels” below)
Personal Data Controller (Data Controller)
Infraset Public Company Limited
Contact location :
165/37-39 Ramindra Road, Anusawari Subdistrict, Bang Khen District, Bangkok 10220
Contact channels :
Email : pdpa@infraset.co.th
phone : 02-092-7444
Fax : 02-092-7448
Website : www.infraset.co.th
11. Applicable law
This announcement It is governed and interpreted according to Thai law. and Thai courts have the authority to consider any disputes that arise.
Effective from 10 May 2022 onwards .
Announced on 10 May 2022