TH / ENG

Privacy Notice

        Okamoto (Thai) Co., Ltd. (“Company”) values your privacy and strives to protect your personal data (“Personal Data”) based on the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”). The Company has, therefore, prepared this Privacy Notice to inform you of details about the collection, use and/or disclosure of your Personal Data.


1.Purposes of collection, use and disclosure of Personal Data

    The Company collect, use and disclose your Personal Data only where there are proper reasons and/or legal grounds to do so. This includes sharing it to third parties under the following main purposes:

    1.1   for performance of a contract or before the Company enters into a contract with you;

    1.2   for processing your personal data in compliance with the law or legal obligations;

    1.3   for trading, transactions and investment risk assessments according to internal processes, applicable law and regulations;

    1.4   for processing information about payment, charge or pay, including accounting purposes, accounting management, company auditing or debt collection;

    1.5   for performance appraisal, internal report, data analysis and manage contractual employment;

    1.6   for regulatory compliance and audit the Company's business affair (Both internal and external);

    1.7   for maintain company security;

    1.8   for recruiting personnel and before the Company enters into an employment contract with you and processing your Personal Data in compliance with the law, obligations under the law or the employment contract;

    1.9   for the Company’s legitimate interests in processing your Personal Data while still considering that your fundamental rights does not exceed the benefits of the Company;

    1.10  for a specific purpose in accordance with the consent you gave to the Company in processing your Personal.


2.Collection of Personal Data

    The Company collects and uses various types of personal information by the type of personal information that the company Collected depends on the situation the nature of the goods, services, activities and/or transactions that you enter into with the Company.

    2.1 Resources for collecting personal data
    The Company collects your personal information from various sources such as

    • When you submit an application or details about your personal history to the company. Either in writing or oral, with the objective of applying for a job/applying for an internship as an employee or employee/trainee/and includes any person in the applicant's family and reference.
    • When you buy products and/or request services from the company.
    • Conversations between you and the Company, letters, e-mails, memos or any other method.
    • When you use the website of the company.
    • Customer opinion survey and complaints about products/ and or services of the Company.
    • When you make your personal information publicly visible. Including the disclosure of information via Social Media. In such cases, the Company will choose to collect only the information that you choose to be publicly available.
    • When the Company receives your personal information from a third party such as a credit information company. Law enforcement agencies, etc.
    • When you purchase any products and/or services of the Company through third parties

    in some instances, the Company may collaborate with third parties who are not affiliated with the Company. Collect your personal data in connection with customer surveys when you visit the Company's products. However, the Company will notify and give you the opportunity to refuse processing of such data.

    2.2 Categories of Personal Data collected, used and/or disclosed
    The categories of your Personal Data that the Company collects, uses and/or discloses (collectively “Process” or “processing”), subject to applicable law, including but not limited to the following:

    • Personal details: First name and surname, gender, date of birth, personal identification number, passport number, other identification number issued by the government authorities to be used as an identity verification document, important documents of legal entities issued by the government (in case that the business partner is a juristic person), tax identification number, nationality, photograph as appears in the identification card, passport or driving license, signatures, identity verification information, other photographs and CCTV images/footage;
    • Contact details: Address, telephone number and email address;
    • Financial details: Details of your bank account, mailing address for issuing invoices, credit card numbers and card holder name and details of credit card;
    • Sensitive personal data:
        • -  Criminal record.
        -  Health data and disability information;
        -  Religion;
        -  Face scan, fingerprint scanner.

    The Company may collect certain types of your sensitive personal information. For use in recruiting and considering welfare and/or services to you. However, the company does not collect, use and/or disclose any type of information this without your express consent except in the case where the law permits.

    2.3 Refusal to give Personal Data to the Company
    Under circumstances where it is necessary for the Company to collect your Personal Data and you refuse to give your Personal Data to the Company, the Company may refuse to take other relevant actions.


3.Processing of Personal Data

    Pursuant to the purposes, the Company may process your Personal Data in accordance with applicable law and a legal basis. The legal basis on which the Company performs such processing are as follows:

Purposes of collection, use and disclosure of Personal Data Legal basis
Products and/or services
  • To deliver/transport the Company's products and/or services.
  • To verify your identity.
  • To resolve existing problems related to the products and/or services.
  • To manage your payment including expense management.
  • To process information about payment, charge or pay, including accounting purposes, accounting management, company auditing or debt collection.
  • To do performance appraisal, internal report, data analysis and manage contractual employment.
  • Contractual basis
Customer care
  • To communicate with you about products and/or services.
  • To register customers.
  • To maintain and keep contact information up to date.
  • To organize events for customers.
  • Legitimate interest
  • To respond to your complaints and find a way to remedy you.
  • To comply with requests regarding the right you have over your personal information in the Company's possession.
  • To manage the relationship between the Company and you or your business.
  • Contractual basis
Business development
  • To identify existing issues related to products and/or services.
  • To plan existing products and/or services for development.
  • To test, analyze and develop products and/or new services.
  • To develop new approaches to meet your needs.
  • To understand and analyze demands and to assess and/or survey your satisfaction.
  • Legitimate interest
Security, safety and risk management
  • To prevent crimes and manage the security of the Company’s premises, the Company may, for example, install a closed circuit television (CCTV) in and around the Company’s premises and these may collect your photos, videos or voice recordings.
  • To investigate, report and seek ways to prevent financial crimes.
  • To audit the internal affairs of the Company.
  • To comply with regulations and audit the Company's business affair (Both internal and external).
  • To comply with legal requirements.
  • Legal obligation
  • To manage the risks of the Company and customers of the Company.
  • To keep documents for reference checks.
  • Legitimate interest
Marketing
  • To survey products and/or services of the Company that you may be interested in.
  • Consent
  • To communicate with you about analytical marketing activities that meet your needs through any method, including email, telephone, text messages, social media, letter or face-to-face.
  • To develop marketing activities.
  • Legitimate interest
Recruiting
  • To perform any action in connection with your job to verify your identity and assess competence, qualifications and suitability for the position.to conduct background checks and reference, communicate with you about the recruitment process, and prepare a record about the Company's hiring process.
  • Contractual basis
  • To take any action related to the calculation of wages. as well as various welfare under the Company's regulations, for example, collecting face scan images , health information, information specified in the medical certificate, etc.
  • To perform any actions related to the restriction of the right to enter-exit specific areas for the safety of the Company's important and confidential information.
  • Any action in the transmission of employee information. to outsiders both at home and abroad for use in contacting work as well as sending employees to train to increase work efficiency.
  • Any action to store images. (Still images, movies) during training, during operation as well as pictures of various activities intended to be used to improve work efficiency and as a media for public relations through various channels.
  • To comply with relevant laws and regulations, comply with various rules and regulations, including tax laws, labor protection laws. Computer-related offenses and laws on Protection of personal data that will be amended or added in the future, including the execution of court orders, etc.
  • Legal obligation

4.Disclosure of Personal Data

    The Company may disclose or send your Personal Data to third parties in order for these individuals to process your Personal Data in the following ways:

    4.1 Disclosure of Personal Data to third parties

    • Subcontractors, brokers or any service provider working for the Company or providing services to the Company including their sub-contractors, service providers, directors and officers;
    • A person assigned to manage any of your interests;
    • Intermediaries, contact persons and your representatives;
    • Financial institutions and payment service providers;
    • Law enforcement agencies, government, courts, dispute resolution agencies, the Company’s controlling person, auditors and any person appointed or requested by the Company's controlling person to check the operational activities of the Company;
    • Any other person in connection with any dispute arising, including any dispute related to a transaction;
    • Fraud prevention agencies which use the information to investigate and prevent fraud and other financial crimes;
    • Any person who orders or manages affairs on your behalf (such as attorneys, lawyers, etc.); and/or whom the Company has been ordered by you to disclose your personal information for transfer of Personal Data overseas.

    4.2 Transfer of Personal Data overseas

          The Company may be required to send or transfer your Personal Data overseas for storage and/or processing in the performance of a contract entered into between you and the Company. The Company will not allow unrelated persons to access the Personal Data and the Company will lay out appropriate security measures.


5.Retention of Personal Data

    The Company will keep your personal data for the period necessary to achieve the specified objectives. In the processing of personal data, the retention period of personal data varies depending on the purposes for which the personal data is collected and processed.

    5.2 The Company will keep personal information for a period of time specified by relevant laws And taking into account the business practices for each type of personal data, after such period the Company may destroy the personal data such that from the storage or the company's system without prior notice.


6.Data Subject Right

    You have entitled to your Personal Data in accordance with the PDPA, and the Company will respect your rights and take actions promptly in accordance with any laws, rules or regulations, under certain circumstances, relating to the processing of your Personal Data.
You have the following rights in regards to your Personal Data:

    6.1 Right to Withdraw Consent
          In case where the Company processes your Personal Data with your consent, this right enables you to withdraw your consent to the Company processing your Personal Data at any time. The Company may continue to process your Personal Data if the Company has another legal basis to do so.

    6.2 Right to Access
          This right enables you to receive a copy of the Personal Data the Company holds about you.

    6.3 Right to Correct
          This right enables you to have any incomplete or inaccurate Personal Data the Company holds about you to become correct, current and complete.

    6.4 Right to Erasure
          This right enables you to ask the Company to delete, destroy or anonymize your Personal Data where there is no good reason for the Company to continue processing it. You also have the right to ask the Company to delete your Personal Data where you have exercised your right to object to the processing (see below). Nonetheless, the Company will consider a request to delete carefully, according to the law, regarding the processing of your Personal Data.

    6.5 Right to Object
          This right enables you to object to the processing of your Personal Data where the Company relies on legitimate interest and there is something about your particular situation which makes you want to object to the processing on this ground. You also have the right to object where the Company processes your Personal Data for direct marketing purposes and profiling activities.

    6.6 Right to Restrict Processing
          This right enables you to ask the Company to suspend the processing of your Personal Data, for example, if you want the Company to establish its accuracy or a reason/lawful basis for processing it.

    6.7 Right to Portability
          In some cases, you have the right to request for a copy of your Personal Data in electronic form to be sent to other data controllers. This right will be used only for the Personal Data you submitted to the Company and the processing of such Personal Data is done with your consent or where such Personal Data is necessary to be processed in order to fulfill the Company’s obligations under a contract.

    6.8 Right to Lodge a Complaint
          This right enables you to file a complaint with a related government authority, including but not limited to, the Thailand Personal Data Protection Committee, when you see that the Company, the Company’s employees or service providers violate or do not comply with the PDPA or other notifications issued under the PDPA. You may exercise your rights at any time by contacting the Company via the contact channels mentioned in Article 8 (Dealing with complaints or inquiries).

    The Company may be required to obtain certain information from you in order to verify your identity and certify your right to access Personal Data (or to exercise any other right) in order to comply with security measures that will ensure that your Personal Data will not be disclosed to anyone who has no right to access it the Company will make every effort to respond to all legitimate requests within 30 days. In some cases, it may take more than 30 days if your request is complex or you submit more than one request. In such event, the Company will notify you and will keep you informed of the status of the request.


7.Security of your Personal Data

    The Company takes the security of your Personal Data very seriously. The Company will inspect and implement organizational security as well as physical and technical measures appropriately in order for the Company to store and process your Personal Data and ensure that your Personal Data will not be lost, destroyed, disclosed and misused or accessed by anyone other than the employee or data processors performing the Company's duties.


8.Dealing with complaints or inquiries

    To make a complaint about how the Company collects, uses, processes and/or discloses your Personal Data, you can contact the Company or ask questions via the following channels:

    Okamoto (Thai) Co., Ltd.

    Personnel Management Department, Okamoto (Thai) Co., Ltd.
    No. 174, Mu 2, Tambol Chamaeb, Amphur Wangnoi, Changwat Phra Nakhon Si Ayutthaya 13170
    Phone: 035-958-499 ext. 107
    Fax: 035-958-491
    Email: adminandiso@okamotothai.com
    Website: https://www.okamotothai.com


9.Amendments to the Privacy Notice

    This privacy notice it is part of the Company's personal data protection policy dated June 1, 2022. The Company will review the privacy policy on a regular basis and there may be amendments to the privacy protection policy that affects this customer privacy notice. You can view the latest amendment. From the date at the bottom of the Privacy Notice via the http://www.okamotothai.com/privacy_notice.html