Personal Data Protection Center

Group 3 
Partners, business alliances, and PTT group companies 

This includes only the Personal Data of employees, personnel, officers, representatives, agents, any persons authorized to act on behalf of the juristic persons, directors, and other natural persons acting on behalf of the partners, business alliances, and PTT group companies

Data Processing

The Company will collect, use, disclose, and/or cross-border transfer the following Personal Data of the Company's partners, business alliances, and PTT group companies:

General Personal Data, such as the first name, last name, nationality, job position, address, telephone/fax number, email address, photographs, motion images from video recording or closed-circuit television (CCTV), audio recordings from meetings, information on the national identification card or passport, household registration documents, signature, first or last name change certificate, social media account information (such as the LINE ID), car information (such as the car plate number, brand, model, and color), and other Personal Data you provide to the Company;

Sensitive Personal Data, including health data for the purpose of disease (including the COVID-19) screening upon your visit or entry into the Company's buildings or operating areas, disability information, which the Company has obtained consent from you or as necessary and permitted by laws;

Payment information, such as bank account number and details; and

Technical data, such as the username and password used to access the system, IP address, Media Access Control data, log files, data cookies data, historical system usage data, website usage data, operating systems and platforms, and other technologies on devices used to access the platform, as well as other Personal Data regarding the use of the Company's system.

Remarks: In the case that you are asked to provide supporting documents that contain Sensitive Personal Data, such as race and religion, for the purpose of identity verification, and such data are unnecessary for the operation, you may redact your Sensitive Personal Data before delivering these documents to the Company. If the Sensitive Personal Data contained in the documents received by the Company is not redacted, the Company reserves the right to redact it. In this case, no Sensitive Personal Data will be deemed to be collected by the Company from you.

The Company may collect your Personal Data from the following sources.

The Company collects, uses, discloses, and/or cross-border transfers your Personal Data for the following purposes:

• To use in procedures relating to joint venture or business alliance with the Company, such as the identity verification or authentication of partners and business alliances, as well as their authorized persons, preliminary evaluation of qualifications of partners and business alliances, selection of partners and business alliances, entering into and management of agreements, and carrying out payment procedures;
• To support internal and external communications that are necessary for the Company's operations;
• To manage risks, and exchange information among the Company, affiliated companies, and the PTT Group companies;
• To establish legal claims, to use as evidence in the initiation and defense of legal claims, and to comply with court orders or orders from government agencies with legal authority as necessary;
• To conduct internal audit in the Company and its affiliated companies, and PTT group companies, to follow up on suggestions, to investigate complaints or claims in order to prevent fraud or improper behavior, and to prevent wrong or illegal acts; and
• To maintain security of the buildings or premises using closed-circuit television (CCTV) recordings.

For Sensitive Personal Data, the Company collects, uses, discloses, and/or cross-border transfer your Sensitive Personal Data for the following purposes:

• To screen diseases and assess risks of communicable diseases before visits or entry into the Company's buildings or operating areas; and
• To produce reports in compliance with the reporting procedures established by the Company, or as regulators or agencies order as specified by laws.

The Company generally collects, uses, and discloses your Personal Data on the following legal bases:

• Where it is for the performance of a contract, or fulfilling your requests before you enter into an agreement with the Company;
• Where it is for legitimate interests of the Company or a third party to the extent that these interests do not override the fundamental rights in your Personal Data;
• Where it is necessary for compliance with a law;
• Upon your consent obtained by the Company upon written request for your consent to the collection, use, and disclosure of your Personal Data; and/or
• Other cases permissible by laws.

Only in the case of the collection, use, and disclosure of your Sensitive Personal Data, the Company relies on the following legal bases:

• Upon explicit consent obtained by the Company from the consent form requesting for your consent to the collection, use, disclosure, and processing of your Personal Data;
• Where it is for vital interests to prevent or suppress any harm to the life, body, or health of a person; and/or
• Where it is necessary for the establishment of a legal claim, compliance with, or exercise of a legal claim, or to defend a legal claim; or
• Other cases permissible by laws.

The Company may disclose your Personal Data (only as necessary) to the following external parties or organizations for the purposes indicated in this Notice, who or which may be located in or outside Thailand.